Duuzer

Aliases: Escad

Malware type
rat
Family
Malware family
Profile updated
2026-07-07 12:46:40

Targeted industries: government-and-public-sector technology-and-telecommunications

Targeted regions: country_code:kr

Context

Duuzer, also known as Escad, is a Remote Access Trojan (RAT) primarily targeting South Korean entities. It is used for cyber espionage, enabling attackers to gain persistent access to infected systems.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Duuzer_Auto (yara-rule)

Reports & references

  • Broadcom/Symantec — Viewdocument (report)
  • blog.lexfo.fr — Lexfo Whitepaper The Lazarus Constellation (report)
  • Broadcom/Symantec — Wannacry Ransomware Attacks Show Strong Links Lazarus Group (report)
  • secureworks.com — Nickel Academy (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Duuzer (report)

External references