Possible Pakistan-Linked Backdoor Targets Afghanistan
Analysis details a backdoor delivered through DLL side-loading, with Afghan government targeting clues, persistence via a Windows Run key, and C2 at 185.235.137[.]35:9000.
dmpdump.github.io
- Total articles
- 5
- Categories
- 1
- Latest article
- Sep 15, 2026
- Category Filter
Articles
5 shown 
Malware Stager Uses CommuniGate-Themed Lure to Target a Russian Organization
Analysis of a malware sample describes a CommuniGate Pro-themed LNK lure, DLL side-loading through calibre.exe, persistence, and a stager that contacts a command-and-control server to retrieve and execute additional payloads.
Analysis of a Low-Detection Linux Implant With Hands-On Intrusion Capabilities
Researchers analyzed a low-detection, statically linked Linux backdoor delivered as a PNG-named ELF. It profiles hosts, communicates with C2, executes commands, transfers files, and supports reverse tunnels; later analysis noted similarities to Adaptix Agent.
Backdoor Targets Linux-Based iKuai Routers
A technical analysis details an ELF backdoor that appears to target iKuai routers, beaconing to a command-and-control server and supporting shell commands, file exfiltration, and payload execution.
Analysis Finds .NET RAT Using Google Sheets C2 in UAE–India-Themed ISO
A researcher analyzed an ISO containing a .NET dropper and a previously unseen RAT dubbed PulseRAT. The RAT uses Google Sheets for command and control, collects system information, and executes attacker-supplied PowerShell commands.