Curated security research, vulnerabilities, advisories and tools for practitioners.

#backdoor

Security coverage tagged backdoor.

1.

Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

incident | 2026-08-20 15:56 | wiz.io | original ↗ | #supply-chain | #malware | #rust

2.

Two popular Rust crates arrayref and append-only-vec compromised in Supply Chain Attack

incident | 2026-08-20 00:00 | aikido.dev | original ↗ | #supply-chain | #threat-intelligence | #rust

3.

The Gentlemen Affiliate Deploys EtherRAT Across Windows Networks Using Ethereum Smart Contract C2

blog | 2026-08-04 00:00 | hunt.io | original ↗ | #web3 | #threat-intelligence | #ransomware

4.

AsyncAPI npm packages backdoored via GitHub Actions

incident | 2026-07-14 00:00 | aikido.dev | original ↗ | #supply-chain | #featured | #incident-response

5.

Shai Hulud and Looking Into the Deep End of Supply Chain Mayhem

blog | 2026-05-16 00:00 | abdulmhsblog.com | original ↗ | #supply-chain | #credential-theft | #npm

6.

DinDoor Backdoor: Deno Runtime Abuse and 20 Active C2 Servers

blog | 2026-04-21 00:00 | hunt.io | original ↗ | #threat-intelligence | #malware | #backdoor

7.

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

blog | 2025-09-04 04:00 | CVE-2025-55305 | blog.trailofbits.com | original ↗ | #backdoor | #vulnerability-disclosure | #v8

8.

Prompt injection engineering for attackers: Exploiting GitHub Copilot

blog | 2025-08-06 04:00 | blog.trailofbits.com | original ↗ | #ai-security | #prompt-injection | #llm-security

9.

XRP supply chain attack: Official NPM package infected with crypto stealing backdoor

incident | 2025-04-22 00:00 | aikido.dev | original ↗ | #supply-chain | #cryptocurrency | #npm

10.

Malicious Signal, Line, and Gmail Installers Target Chinese-Speaking Users with Backdoors

blog | 2025-02-18 00:00 | hunt.io | original ↗ | #backdoor | #gmail | #signal

11.

Rekoobe Backdoor Discovered in Open Directory, Possibly Targeting TradingView Users

blog | 2024-10-24 00:00 | hunt.io | original ↗ | #backdoor | #ssh-keys | #open-directories

12.

WarmCookie Infrastructure Update: Uncovering New C2 Servers and Threats

blog | 2024-10-17 00:00 | hunt.io | original ↗ | #threat-hunting | #backdoor | #ssh-keys

13.

Toneshell Backdoor Used to Target Attendees of the IISS Defence Summit

blog | 2024-09-03 00:00 | hunt.io | original ↗ | #backdoor | #spearphishing | #cyber-espionage

14.

MIFARE Classic: exposing the static encrypted nonce variant... and a few hardware backdoors

research | 2024-08-19 22:00 | blog.quarkslab.com | original ↗ | #cryptography | #backdoor | #rfid

15.

BlueShell: Four Years On, Still A Formidable Threat

blog | 2024-04-09 00:00 | hunt.io | original ↗ | #backdoor | #golang | #tls-certificates

16.

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

vulnerability | 2024-04-01 16:00 | CVE-2024-3094 | hackerone.com | original ↗ | #supply-chain | #open-source | #linux

17.

DnsAdmins Revisited

blog | 2021-03-15 14:05 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #backdoor

18.

Why Most Organizations Still Can’t Defend against DCShadow

blog | 2019-07-16 19:15 | semperis.com | original ↗ | #active-directory | #backdoor | #mimikatz

19.

TCP backdoor 32764 or how we could patch the Internet (or part of it ;))

research | 2014-01-21 23:00 | blog.quarkslab.com | original ↗ | #exploitation | #iot | #backdoor