Home / Threat actors / DarkHydrus
DarkHydrus G0079
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
0
associated CVEs
7
Techniques
3
Malware and tools
DarkHydrus is a threat group that has targeted government agencies and educational institutions in the Middle East since at least 2016. The group heavily leverages open-source tools and custom payloads for carrying out attacks.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Resource Development
T1588.002 Tool Initial Access
T1566.001 Spearphishing Attachment Execution
T1059.001 PowerShellT1204.002 Malicious File Stealth
T1221 Template InjectionT1564.003 Hidden Window Credential Access
T1187 Forced Authentication Malware and tools
- Cobalt StrikeMalwareS0154
- RogueRobinMalwareS0270
- MimikatzToolS0002
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.