PortDoor
- Malware type
- backdoor
- Profile updated
- 2026-07-07 14:21:32
Targeted industries: defense-and-aerospace
Targeted regions: country_code:cn country_code:in
Context
PortDoor is a sophisticated backdoor primarily targeting the defense and aerospace sectors. It enables attackers to conduct espionage by providing remote access and control over targeted systems. The malware has been observed in operations targeting specific countries in Asia.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Portdoor_Auto (yara-rule)
Reports & references
- medium.com — Portdoor Malware Afc9D0796Cba (report)
- socinvestigation.com — Chinese New Backdoor Deployed For Cyberespionage (report)
- ics-cert.kaspersky.com — Kaspersky Ics Cert Targeted Attack On Industrial Enterprises And Public Institutions En (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Portdoor (report)
- cybereason.com — Portdoor New Chinese Apt Backdoor Attack Targets Russian Defense Sector (report)