ATT&CKcon 7.0 registration is open! Join us October 27-28, 2026 in McLean, VA or virtually. Register in person or register virtually. See the FAQ for hotel and venue details.
ACAD/Medre.A
ACAD/Medre.A is a worm that steals operational information. The worm collects AutoCAD files with drawings. ACAD/Medre.A has the capability to be used for industrial espionage.[1]
ID: S1000
ⓘ
Type: MALWARE
Version: 1.0
Created: 31 May 2017
Last Modified: 16 April 2025
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| ICS | T0893 | Data from Local System |
ACAD/Medre.A collects information related to the AutoCAD application. The worm collects AutoCAD (*.dwg) files with drawings from infected systems. [1] |
|
| ICS | T0882 | Theft of Operational Information |
ACAD/Medre.A can collect AutoCad files with drawings. These drawings may contain operational information. [1] |
|
