Home > List all groups > List all tools > List all groups using tool Killua

Threat Group Cards: A Threat Actor Encyclopedia

Names	Killua
Category	Malware
Type	Backdoor
Description	(Palo Alto) The otc.dll file is a tool named Killua that is a simple backdoor that allows an actor to issue commands from a C2 server to run on the infected system by communicating back and forth using DNS tunneling. Based on string comparisons, we believe with high confidence that the same developer created both the Killua and Hisoka tools.
Information	<https://unit42.paloaltonetworks.com/xhunt-campaign-attacks-on-kuwait-shipping-and-transportation-organizations/>

Last change to this tool card: 29 April 2020

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups