UAT-10027 targeting U.S. healthcare & education with:• “Dohdoor” DoH-based backdoor• Cloud-masked C2 via encrypted DNS• Cobalt Strike beaconsPossible DPRK nexus (low confidence).

technadu@infosec.exchange

UAT-10027 targeting U.S. healthcare & education with:
• “Dohdoor” DoH-based backdoor
• Cloud-masked C2 via encrypted DNS
• Cobalt Strike beacons
Possible DPRK nexus (low confidence).

Full analysis:
https://www.technadu.com/uat-10027-leverages-dohdoor-backdoor-and-cobalt-strike-against-us-education-and-healthcare/621270/

#InfoSec #APT #HealthcareSecurity #ThreatIntel

CIRCLE WITH A DOT

UAT-10027 targeting U.S. healthcare &amp; education with:• “Dohdoor” DoH-based backdoor• Cloud-masked C2 via encrypted DNS• Cobalt Strike beaconsPossible DPRK nexus (low confidence).

UAT-10027 targeting U.S. healthcare & education with:• “Dohdoor” DoH-based backdoor• Cloud-masked C2 via encrypted DNS• Cobalt Strike beaconsPossible DPRK nexus (low confidence).