Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 03:31:51 UTC
Home > List all groups > List all tools > List all groups using tool Doraemon
 Tool: Doraemon
Names Doraemon
Category Malware
Type Backdoor
Description
(Trend Micro) While this backdoor is already quite old, it is rarely discussed by the general
public. Recently mentioned by ESET in their SideWalk report, we first encountered Doraemon
around 2016 in incidents involving Korean and Taiwanese online gaming companies. It then
disappeared from view for about three years until we encountered it again in 2020.
Information
Last change to this tool card: 25 January 2022
Download this tool card in JSON format
All groups using tool Doraemon
Changed Name Country Observed
APT groups
 Earth Lusca 2019-Sep 2024
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cca9f97f-1567-4729-9da0-837e026dbc7f
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=cca9f97f-1567-4729-9da0-837e026dbc7f
Page 1 of 1