{
  "id": "backdoordiplomacy",
  "name": "BackdoorDiplomacy",
  "aliases": [],
  "domain": "cyber",
  "country": "UNK",
  "category": "Unattributed cyber threat group",
  "status": "tracked",
  "fielded": null,
  "operators": [],
  "summary": "BackdoorDiplomacy is a cyber espionage threat group that has been active since at least 2017. BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Not attributed by ATT&CK",
      "src": [
        "mitre-g0135"
      ],
      "conf": "low"
    },
    {
      "k": "active_since",
      "v": 2017,
      "src": [
        "mitre-g0135"
      ],
      "conf": "medium",
      "note": "At least 2017"
    },
    {
      "k": "attack_id",
      "v": "G0135",
      "src": [
        "mitre-g0135"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia.",
      "src": [
        "mitre-g0135"
      ],
      "conf": "medium"
    },
    {
      "k": "techniques_count",
      "v": 15,
      "src": [
        "mitre-g0135"
      ],
      "conf": "high",
      "note": "ATT&CK v20.1"
    },
    {
      "k": "software",
      "v": "China Chopper, Mimikatz, NBTscan, QuasarRAT, Turian",
      "src": [
        "mitre-g0135"
      ],
      "conf": "high",
      "note": "5 malware and tool entries linked in ATT&CK"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "notes": "BackdoorDiplomacy is a cyber espionage threat group that has been active since at least 2017. BackdoorDiplomacy has targeted Ministries of Foreign Affairs and telecommunication companies in Africa, Europe, the Middle East, and Asia. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.",
  "changelog": [
    {
      "date": "2026-11-08",
      "change": "Entry created from MITRE ATT&CK Enterprise v20.1 (group G0135)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/backdoordiplomacy.html",
  "sources": {
    "mitre-g0135": {
      "title": "BackdoorDiplomacy, Group G0135",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0135/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-11-08"
    }
  }
}