Malware4 min read
Mistic Backdoor Feeds Qilin, Akira, and Black Basta Operations
Symantec links the stealthy Mistic backdoor to KongTuke, an initial access broker supplying corporate network access to major ransomware gangs.
James RiveraJun 25, 2026
Backdoor
10 articles tagged with "Backdoor"
Malware4 min read
SprySOCKS Backdoor Gets Windows Variants With Kernel-Level Stealth
China-linked FishMonger APT expands its Linux-only SprySOCKS backdoor to Windows with WIN_DRV and WIN_PLUS variants featuring kernel drivers and Print Spooler abuse.
James RiveraJun 16, 2026
Malware4 min read
DAEMON Tools Trojanized Since April—Backdoor Hit 100+ Countries
Kaspersky uncovered a supply chain attack on DAEMON Tools official website. Trojanized installers deployed QUIC RAT backdoors to thousands of systems, with a dozen government and manufacturing targets receiving advanced payloads.
Malware DeskMay 8, 2026
Malware4 min read
DEEP#DOOR Backdoor Harvests Passwords, Cloud Tokens, SSH Keys
Securonix uncovers DEEP#DOOR, a Python-based backdoor that steals browser passwords, AWS/Azure credentials, and SSH keys while evading detection through bore.pub tunneling and extensive anti-analysis.
Malware DeskMay 4, 2026
Malware4 min read
Smart Slider Hijacked: 900K WordPress Sites Get Backdoored
Attackers compromised Nextend's update infrastructure to push a malicious Smart Slider 3 Pro version with four layers of backdoors. Here's who's affected and how to recover.
Malware DeskApr 9, 2026
Threat Intelligence4 min read
Russia-Linked DRILLAPP Backdoor Weaponizes Edge Browser Debugging
New JavaScript backdoor targets Ukrainian entities using Microsoft Edge's debugging features for stealth. S2 Grupo links campaign to Laundry Bear threat group.
Threat Intel DeskMar 17, 2026
Malware4 min read
CISA: RESURGE Malware Can Remain Dormant on Ivanti Devices
Updated CISA analysis reveals RESURGE implant uses advanced evasion techniques and can persist undetected on Ivanti Connect Secure devices until remote activation.
Malware DeskMar 1, 2026
Malware4 min read
Dohdoor Backdoor Targets US Healthcare and Education Sectors
Cisco Talos uncovers UAT-10027 deploying Dohdoor malware against American hospitals and schools. The backdoor uses DNS-over-HTTPS to evade detection.
Malware DeskFeb 27, 2026
Threat Intelligence5 min read
CISA Releases New BRICKSTORM Backdoor IOCs Tied to PRC State Actors
Joint advisory from CISA, NSA, and Canadian Cyber Centre details new Rust-based variants of Chinese government malware targeting IT and government sectors.
Threat Intel DeskDec 22, 2025
Vulnerabilities5 min read
CISA Warns of Asus Live Update Supply Chain Backdoor Under Active Attack
CVE-2025-59374 exploits compromised ASUS software distribution to deploy backdoors on consumer and enterprise systems worldwide.
Vulnerability DeskDec 18, 2025