Tool
Shodan
- First Reported
- Sep 8, 2026
- Latest Reported
- Sep 8, 2026
Reported Context (1)
- Querying Shodan for the staging IP (an Azure VM used only to host the second-stage download) showed an exposed RPC endpoint mapper leaking that exact NetBIOS name, confirming the builder machine and the delivery host HVNC Backdoor Uses Fake Tax and DocuSign Lures to Target Latin American Organizations
Threat Actors (1)
MITRE ATT&CK (15)
Vendors (3)
Products (4)
Tools (6)
Industries (2)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.