---
id: 6315
title: "BlueShell: Four Years On, Still A Formidable Threat"
source_domain: hunt.io
source_url: "https://hunt.io/blog/blueshell-four-years-on-still-a-formidable-threat"
published_at: "2024-04-09T00:00:00Z"
tags: ["backdoor", "golang", "tls-certificates", "south-korea", "blueshell", "dalbit"]
phying_url: "https://phying.com/item/6315"
lang: en
---

# BlueShell: Four Years On, Still A Formidable Threat

## Summary

Four years on, the BlueShell backdoor remains widely used; Hunt examines recent servers and its default TLS certificate, plus attacks on South Korea and Thailand linked to the Dalbit group.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-04-09T00:00:00Z
- **Original:** https://hunt.io/blog/blueshell-four-years-on-still-a-formidable-threat
- **Phying News:** https://phying.com/item/6315