Loading threat actor…
Duqu 2.0 is a highly sophisticated malware platform associated with cyber-espionage operations. It is widely regarded as an advanced successor to the original Duqu malware and is notable for stealth-focused tradecraft, including use of in-memory components and removal of installer artifacts from disk after execution. Reported behavior includes deployment through malicious MSI packages, execution of payloads that persist primarily in memory, and anti-forensic cleanup designed to reduce host-based evidence. Duqu 2.0 is commonly discussed alongside other elite intrusion frameworks such as Regin, ProjectSauron, Equation, and Longhorn/Lamberts because of its complexity and operational maturity. Its tooling and operational style are consistent with intelligence collection rather than financially motivated crime, emphasizing covert access, persistence, and post-exploitation capabilities. The actor or operators behind Duqu 2.0 have been linked in public reporting to high-end espionage activity, but the supplied facts do not directly support additional attribution details beyond its role as an advanced espionage malware family.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Referenced only as a comparison point for sophistication.
Referenced as an example of advanced anti-forensic and memory-resident malware techniques, including deleting dropped components from disk and leaving payloads in memory, as well as using a special driver for tunnelling.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.