Malware
KTLVdoor
- First Reported
- Mar 11, 2026
- Latest Reported
- Mar 11, 2026
Reported Context (1)
- campaigns show expanded tooling and tradecraft — including the new Go-based, multi-platform backdoor KTLVdoor, extensive use of ShadowPad/Winnti toolsets, and a large, cloud-hosted, rotating C2 infrastructure to Earth Lusca Adds Go-Based KTLVdoor Backdoor to Its Espionage Toolkit
CVE (2)
Malware (7)
Threat Actors (13)
MITRE ATT&CK (5)
Products (3)
Tools (1)
Industries (7)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.