Malware
HIUPAN
- First Reported
- Mar 27, 2026
- Latest Reported
- Apr 3, 2026
Reported Context (2)
- Stately Taurus used infected USB drives and the USBFect (HIUPAN) worm to deploy the PUBLOAD backdoor and exfiltrate data with a fake TLS header. Unit 42 Details Three-Cluster Cyberespionage Campaign Targeting Southeast Asian Government
- June–August 2025 targeting a Southeast Asian government organization, involving USB-propagated USBFect/HIUPAN that deployed the PUBLOAD backdoor and two additional clusters (CL-STA-1048 and CL-STA-1049) using Unit 42 Details Three Cyberespionage Clusters Targeting a Southeast Asian Government
Malware (13)
Threat Actors (8)
MITRE ATT&CK (11)
Vendors (1)
Products (8)
Tools (2)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
