Sophisticated Merdoor backdoor long used in Lancefly APT attacks
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Ssh - T1021.004 Tool - T1588.002 Vulnerabilities - T1588.006 Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID efbec6b9-bbf7-4237-b6c7-d87b597701bc
Fingerprint 5c878196e1fb8752
Analysis status DONE
Considered CTI value 1
Text language
Published May 17, 2023, 11:33 a.m.
Added to db May 25, 2023, 2:32 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Sophisticated Merdoor backdoor long used in Lancefly APT attacks
Title Sophisticated Merdoor backdoor long used in Lancefly APT attacks
Detected Hints/Tags/Attributes 23/2/2
Source URLs
Redirection Url
Details Source https://www.scmagazine.com/brief/critical-infrastructure/sophisticated-merdoor-backdoor-long-used-in-lancefly-apt-attacks
URL Provider
Details Provider Source level domain
Details scmagazine.com www.scmagazine.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 162 ✔ — https://media.cert.europa.eu/rss?type=category&id=APTFilter&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Threat Actor Identifier - APT 522 
APT41
Details Threat Actor Identifier - APT 66 
APT17