Larva-26005

MISP
Type:
Unknown
Country:
Unknown
First seen:
Unknown
Details:

Larva-26005 is a threat actor confirmed to be distributing Xctdoor, a RAT, to users in Korea. The malware was initially disclosed in 2024 and was later found disguised as an integrated security program in an attack case reported by Hauri in 2026.

Metadata
ID: 1109
Created: 07/08/2026 04:00
Updated: 11/09/2026 04:00