Threats Tagged 'surveillance backdoor'
View all threats tagged with 'surveillance backdoor'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'surveillance backdoor'
Click on any threat for detailed analysis and mitigation recommendations
HEAVYGRAM is a multi-stage Windows backdoor linked to the Iran-associated threat actor Handala Hack, active since Fall 2023. It targets Iranian dissidents, journalists, and government opponents using social engineering to deliver malicious files disguised as legitimate applications. The malware uses the Telegram bot API for command-and-control, enabling remote execution, screen capture, data exfiltration, and persistence through DLL side-loading and registry modifications. Its infrastructure includes networks of Telegram bots and groups, and it aligns with known Iranian intelligence operations disclosed by the U.S. Department of Justice. Join the discussion | AlienVault OTX General | 09/17/2026, 21:02:31 UTC Added: 09/18/2026, 08:16:51 UTC |
Showing 1 to 1 of 1 result