Malware
NotDoor
- First Reported
- Feb 2, 2026
- Latest Reported
- Mar 26, 2026
Reported Context (2)
- assesses that the campaigns that use PrismexStager likely represent a strategic expansion of the "NotDoor" ecosystem, extending its multiple infection chains to now include rapid exploitation of newly disclosed Pawn Storm Uses PRISMEX Malware and Exploits Microsoft Office Vulnerability in Campaign Targeting Ukraine and Allies
- ThreatLabz named this VBA-based malware MiniDoor, as it appears to be a minimal version of NotDoor reported by Lab52. Similar to NotDoor, MiniDoor collects emails from the infected machine, but does not support the APT28 Used CVE-2026-21509 to Deploy Email-Stealing and Backdoor Malware in Eastern Europe
CVE (2)
Malware (8)
Threat Actors (5)
MITRE ATT&CK (13)
Vendors (1)
Products (4)
Tools (3)
Industries (6)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.