Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 19:41:35 UTC
Home > List all groups > List all tools > List all groups using tool HOTLANE
 Tool: HOTLANE
Names HOTLANE
Category Malware
Type Tunneling
Description
(Mandiant) They have also employed a custom utility Mandiant named HOTLANE, which is a
tunneler written in C/C++ that can operate in client or server mode and communicates with a
custom binary protocol over TCP.
Information <https://www.mandiant.com/resources/fin13-cybercriminal-mexico>
Last change to this tool card: 26 December 2021
Download this tool card in JSON format
All groups using tool HOTLANE
Changed Name Country Observed
APT groups
  FIN13 [Unknown] 2016  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6b068c25-ea75-446f-b5f1-77a2feb2f102
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6b068c25-ea75-446f-b5f1-77a2feb2f102
Page 1 of 1