สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool Doraemon

Threat Group Cards: A Threat Actor Encyclopedia

Tool: Doraemon

Names	Doraemon
Category	Malware
Type	Backdoor
Description	(Trend Micro) While this backdoor is already quite old, it is rarely discussed by the general public. Recently mentioned by ESET in their SideWalk report, we first encountered Doraemon around 2016 in incidents involving Korean and Taiwanese online gaming companies. It then disappeared from view for about three years until we encountered it again in 2020.
Information	<https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/a/earth-lusca-employs-sophisticated-infrastructure-varied-tools-and-techniques/technical-brief-delving-deep-an-analysis-of-earth-lusca-operations.pdf> <https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/>

Last change to this tool card: 25 January 2022

Download this tool card in JSON format

Previous: DoppelPaymer
Next: Dorshel

All groups using tool Doraemon

Changed	Name	Country	Observed
APT groups
	Earth Lusca		2019-Sep 2024

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]