HDoor

MITRE ATT&CK: S0061 View on attack.mitre.org

Aliases: Custom HDoor, HDoor

First seen
2015-03-01 00:00:00
Malware type
backdoor
Family
Malware family
Operating systems
windows
Profile updated
2026-07-07 12:36:36

Targeted industries: government-and-public-sector defense-and-aerospace

Targeted regions: country_code:cn country_code:ph country_code:vn

Context

HDoor is malware that has been customized and used by the Naikon group.

Detection coverage

  • 174 Sigma rules

Malware & tools used

  • Network Service Discovery (attack-pattern)
  • Disable or Modify Tools (attack-pattern)

Used by threat actors

Reports & references

  • media.kasperskycontenthub.com — Thenaikonapt Msnmm1 (report)
  • MITRE ATT&CK — S0061 (report)

External references