ItaDuke is an actor known since 2013. It used PDF exploits for dropping malware and Twitter accounts to store C2 server urls. On 2018, an actor named ...
Actor Overview
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on ItaDuke is published.
Actor Details
Primary Name
ItaDuke
Known Aliases
DarkUniverse, SIG27
Data Source
Precursor Intelligence