Malware
GTPDoor
- First Reported
- Nov 13, 2026
- Latest Reported
- Nov 13, 2026
Reported Context (2)
- Starting in the first quarter of 2026, Enea spotted and blocked Liminal Panda’s GTPDoor backdoor at several of its mobile operator customers. Enea Details SilentAir Activity Intercepting Calls and SMS Through Compromised Mobile Networks
- at several customer operators since the first quarter of this year. The company blocked the group's GTPDoor traffic there and saw Liminal Panda infections, or strong signs of them, in at least 5 to 10 operators. SilentAir Used Compromised Telecom Equipment to Intercept SMS 2FA Codes
Malware (1)
Threat Actors (2)
MITRE ATT&CK (2)
Vendors (2)
Tools (1)
Industries (1)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.