{"id":57818,"date":"2024-12-05T00:00:00","date_gmt":"2024-12-05T00:00:00","guid":{"rendered":"urn:uuid:48059e43-12ed-69ea-594f-709baf195d26"},"modified":"2024-12-05T00:00:00","modified_gmt":"2024-12-05T00:00:00","slug":"moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/","title":{"rendered":"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks"},"content":{"rendered":"

<\/p>\n

<\/div>\n\nCommand ID<\/b><\/td>\nFunction<\/b><\/td>\n<\/tr>\n\ncmd_10001<\/td>\nCollect mobile device information (including IMEI, IMSI, serial number, device brand, device model, OS version, memory size, SD card size, power, MAC address, WIFI MAC address, root permission, IP address, accessibility enabled, device manager enabled, NET type, client version, camera enabled, Bluetooth MAC address, camera information, plugin version, phone number, OS ID, microphone enabled)<\/td>\n<\/tr>\n\ncmd_10002<\/td>\nCollect installed APPs information (including APP name, package name, version, installed time, installed path, size, system app or not)<\/td>\n<\/tr>\n\ncmd_10003<\/td>\nCollect contacts information<\/td>\n<\/tr>\n\ncmd_10004<\/td>\nCollect content of SMS (Short Message Service)<\/td>\n<\/tr>\n\ncmd_10005<\/td>\nRecord phone call<\/td>\n<\/tr>\n\ncmd_10006<\/td>\nTake a picture from front-facing camara<\/td>\n<\/tr>\n\ncmd_10008<\/td>\nCollect geolocation information from GPS and CDMA<\/td>\n<\/tr>\n\ncmd_10009<\/td>\nCollect phone call history<\/td>\n<\/tr>\n\ncmd_10010<\/td>\nCollect WIFI information (from local settings or by WIFI scanner)<\/td>\n<\/tr>\n\ncmd_10011<\/td>\nCollect directory information (including SD card, Pictures, DCIM, Downloads folders)<\/td>\n<\/tr>\n\ncmd_10012<\/td>\nCollect directory information from a specified folder<\/td>\n<\/tr>\n\ncmd_10013<\/td>\nCollect a file content from the device<\/td>\n<\/tr>\n\ncmd_10014<\/td>\nCollect browser bookmarks<\/td>\n<\/tr>\n\ncmd_10015<\/td>\nCollect a specified APP database<\/td>\n<\/tr>\n\ncmd_10016<\/td>\nCollect WeChat\u2019s resource information<\/td>\n<\/tr>\n\ncmd_10018<\/td>\nTake a screenshot<\/td>\n<\/tr>\n\ncmd_10019<\/td>\nRecord at a scheduled time<\/td>\n<\/tr>\n\ncmd_10021<\/td>\nA collective execution of cmd10005, cmd10006, cmd10008, cmd10011, cmd10015, cmd10016, and cmd10018<\/td>\n<\/tr>\n\ncmd_10024<\/td>\nCollect clipboard data<\/td>\n<\/tr>\n\ncmd_10025<\/td>\nCollect input method information<\/td>\n<\/tr>\n\ncmd_10026<\/td>\nCollect messages from WeChat via Accessibility<\/td>\n<\/tr>\n\ncmd_10027<\/td>\nCollect messages from QQ via Accessibility<\/td>\n<\/tr>\n\ncmd_10028<\/td>\nArchive a file or a folder<\/td>\n<\/tr>\n\ncmd_10029<\/td>\nCollect messages from Skype via Accessibility<\/td>\n<\/tr>\n\ncmd_10030<\/td>\nCollect messages from WhatsApp via Accessibility<\/td>\n<\/tr>\n\ncmd_10031<\/td>\nCollect messages from DingTalk via Accessibility<\/td>\n<\/tr>\n\ncmd_10037<\/td>\nCollect messages from MOMO via Accessibility<\/td>\n<\/tr>\n\ncmd_10038<\/td>\nCollect messages from TalkBox via Accessibility<\/td>\n<\/tr>\n\ncmd_10039<\/td>\nCollect messages from Voxer via Accessibility<\/td>\n<\/tr>\n\ncmd_10043<\/td>\nCollect a specified APP resource information<\/td>\n<\/tr>\n\ncmd_10044<\/td>\nCollect messages from Telegram via Accessibility<\/td>\n<\/tr>\n\ncmd_20001<\/td>\nDownload a URL<\/td>\n<\/tr>\n\ncmd_20002<\/td>\nRecord phone call<\/td>\n<\/tr>\n\ncmd_20003<\/td>\nCollect WeChat\u2019s resource information<\/td>\n<\/tr>\n\ncmd_20004<\/td>\nExecute a shell command<\/td>\n<\/tr>\n\ncmd_20005<\/td>\nCollect messages from WeChat via local database \u201cEnMicroMsg.db\u201d<\/td>\n<\/tr>\n\ncmd_99999<\/td>\nUninstall backdoor<\/td>\n<\/tr>\n

Read More HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Trend Micro\u2019s monitoring of the MOONSHINE exploit kit revealed how it\u2019s used by the threat actor Earth Minotaur to exploit Android messaging app vulnerabilities and install the DarkNimbus backdoor for surveillance. Read More HERE…<\/p>\n","protected":false},"author":2,"featured_media":57819,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[61],"tags":[9546,9510,9511],"class_list":["post-57818","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trendmicro","tag-trend-micro-research-apttargeted-attacks","tag-trend-micro-research-articles-news-reports","tag-trend-micro-research-cyber-threats"],"yoast_head":"\nMOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2024-12-05T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/trendmicro.scene7.com\/is\/image\/trendmicro\/EarthMinotaur-thumbnail:Large?qlt=80\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks\",\"datePublished\":\"2024-12-05T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/\"},\"wordCount\":324,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png\",\"keywords\":[\"Trend Micro Research : APT&Targeted Attacks\",\"Trend Micro Research : Articles, News, Reports\",\"Trend Micro Research : Cyber Threats\"],\"articleSection\":[\"TrendMicro\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/\",\"name\":\"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png\",\"datePublished\":\"2024-12-05T00:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png\",\"width\":976,\"height\":533},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Trend Micro Research : APT&Targeted Attacks\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/trend-micro-research-apttargeted-attacks\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/","og_locale":"en_US","og_type":"article","og_title":"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2024-12-05T00:00:00+00:00","og_image":[{"url":"https:\/\/trendmicro.scene7.com\/is\/image\/trendmicro\/EarthMinotaur-thumbnail:Large?qlt=80","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks","datePublished":"2024-12-05T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/"},"wordCount":324,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/12\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png","keywords":["Trend Micro Research : APT&Targeted Attacks","Trend Micro Research : Articles, News, Reports","Trend Micro Research : Cyber Threats"],"articleSection":["TrendMicro"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/","url":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/","name":"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/12\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png","datePublished":"2024-12-05T00:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/12\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/12\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks.png","width":976,"height":533},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/moonshine-exploit-kit-and-darknimbus-backdoor-enabling-earth-minotaurs-multi-platform-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Trend Micro Research : APT&Targeted Attacks","item":"https:\/\/www.threatshub.org\/blog\/tag\/trend-micro-research-apttargeted-attacks\/"},{"@type":"ListItem","position":3,"name":"MOONSHINE Exploit Kit and DarkNimbus Backdoor Enabling Earth Minotaur\u2019s Multi-Platform Attacks"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57818","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=57818"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57818\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/57819"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=57818"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=57818"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=57818"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}