Skip to content

MiniBike

Software · ATTACK:enterprise:S9059

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:S9059",
  "title": "MiniBike",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S9059",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--1cf09c8f-32e1-404c-bb1e-4ac9ee7c5191",
  "external_id": "S9059",
  "domain": "enterprise",
  "created": "2026-09-28T18:35:48.220Z",
  "modified": "2026-10-01T21:23:13.768Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Mandiant_UNC1549_Feb2024",
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/suspected-iranian-unc1549-targets-israel-middle-east"
    }
  ]
}

Explicit source assertions (10)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--2ee98c43-5180-40dc-8f2a-70eb86d28cbe

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1071.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4a073c13-46df-4df5-8c5a-76451a6e6caf

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1027.015

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4ab2dd12-fdad-42e5-9dbb-495e85ae4644

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1574.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--71c6ee18-1261-434e-aa95-e3eaad64c3e9

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1041

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--73779216-1b58-4834-bdd6-8dc7391d0761

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1547.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9158527d-c4f7-4088-89b1-d62dc35bf196

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:G1059 → uses → ATTACK:enterprise:S9059

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d1a02e08-d9b5-41c0-9cbe-8c8e5095c3c2

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1083

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d466eac7-775f-4f63-98cc-31d719ea109d

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1082

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--dea3c118-57a6-4ce2-b8f2-01cb6e417d6d

Mandiant_UNC1549_Feb2024

ATTACK:enterprise:S9059 → uses → ATTACK:enterprise:T1005

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e29a5b07-48b5-429e-ab32-84c98094372f

Mandiant_UNC1549_Feb2024

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.