Home / Threat actors / MoustachedBouncer
MoustachedBouncer G1019
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
1
associated CVEs
9
Techniques
3
Malware and tools
MoustachedBouncer is a cyberespionage group that has been active since at least 2014 targeting foreign embassies in Belarus.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
“MoustachedBouncer has exploited CVE-2021-1732 to execute malware components with elevated rights.”
Techniques by tactic
Initial Access
T1659 Content Injection Execution
T1059.001 PowerShellT1059.007 JavaScript Privilege Escalation
T1068 Exploitation for Privilege Escalation Stealth
T1027.002 Software Packing Collection
T1074.002 Remote Data StagingT1113 Screen Capture Command and Control
T1090 ProxyT1659 Content Injection Malware and tools
- DiscoMalwareS1088
- NightClubMalwareS1090
- SharpDiscoMalwareS1089
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.