Software: Duqu

From attackics
Jump to navigation Jump to search
Duqu
Software
ID S0014
Aliases Duqu
Type Malware

Duqu is a collection of computer malware discovered in 2011. It is reportedly related to the Stuxnet worm, although Duqu is not self-replicating.1

Associated Software Descriptions

  • Duqu - 1

Techniques Used

  • Theft of Operational Information - Duqu’s purpose is to "gather intelligence data and assets from entities such as industrial infrastructure and system manufacturers, amongst others not in the industrial sector, in order to more easily conduct a future attack against another third party."1
  • Data from Information Repositories - Duqu downloads additional modules for the collection of data in information repositories. The modules are named: infostealer 1, infostealer 2 and reconnaissance.1