Blue Mockingbird
Blue Mockingbird is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 3 sectors, including Government and Technology, in 3 countries, including the United States and India. It uses 30 MITRE ATT&CK techniques and exploits 3 known CVEs.
- Techniques
- 30
- Exploited CVEs
- 3
- First seen
- Dec 1, 2019
- Last seen
- Jan 1, 2022
- Record updated
Who They Target.
Sectors · 3
Countries · 3
About Blue Mockingbird.
Blue Mockingbird is a cluster of observed activity involving Monero cryptocurrency-mining payloads in dynamic-link library (DLL) form on Windows systems.
Last updated Sep 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.