Malware
MiniDoor
- First Reported
- Feb 2, 2026
- Latest Reported
- Mar 26, 2026
Reported Context (2)
- The C&C server delivers one of two primary payload chains: Path A (PRISMEX) or Path B (MiniDoor Chainm which is reported by Zscaler ThreatLabz). Pawn Storm Uses PRISMEX Malware and Exploits Microsoft Office Vulnerability in Campaign Targeting Ukraine and Allies
- payload delivery, and the execution chain. We analyze the capabilities of the resulting tools, including MiniDoor, PixyNetLoader, and a Covenant Grunt implant, along with their command-and-control (C2) communications. APT28 Used CVE-2026-21509 to Deploy Email-Stealing and Backdoor Malware in Eastern Europe
CVE (2)
Malware (8)
Threat Actors (5)
MITRE ATT&CK (13)
Vendors (1)
Products (4)
Tools (3)
Industries (6)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.