KTLVdoor (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 14:49:04 UTC
elf.ktlv_door (Back to overview)
KTLVdoor
Actor(s): Earth Lusca
According to Trend Micro, KTLVdoor is a highly obfuscated malware that masquerades as different system
utilities, allowing attackers to carry out a variety of tasks including file manipulation, command execution, and
remote port scanning.
References
2024-09-04 ⋅ Trend Micro ⋅ Cedric Pernet, Jaromír Hořejší
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion
KTLVdoor KTLVdoor
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/elf.ktlv_door
https://malpedia.caad.fkie.fraunhofer.de/details/elf.ktlv_door
Page 1 of 1