Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 23:38:37 UTC
Home > List all groups > List all tools > List all groups using tool KTLVdoor
 Tool: KTLVdoor
Names KTLVdoor
Category Malware
Type Backdoor
Description
(Trend Micro) KTLVdoor is a highly obfuscated malware that masquerades as different system
utilities, allowing attackers to carry out a variety of tasks including file manipulation,
command execution, and remote port scanning.
Information <https://www.trendmicro.com/en_us/research/24/i/earth-lusca-ktlvdoor.html>
Malpedia
<https://malpedia.caad.fkie.fraunhofer.de/details/elf.ktlv_door>
<https://malpedia.caad.fkie.fraunhofer.de/details/win.ktlv_door>
Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool KTLVdoor
Changed Name Country Observed
APT groups
  Earth Lusca 2019-Sep 2024  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d20c09e0-6824-4fcb-9640-61e9e6bc6f80
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d20c09e0-6824-4fcb-9640-61e9e6bc6f80
Page 1 of 1