MITRE ATT&CKsoftware (malware)

S1211 Hannotog

Published 2025-03-16 Modified 2025-04-04 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2025-03-16

Description

Hannotog is a type of backdoor malware uniquely assoicated with Lotus Blossom operations since at least 2022.

Related

Uses · MITRE ATT&CK (7)

  • T1686 Disable or Modify System Firewall technique
  • T1571 Non-Standard Port technique
  • T1059.003 Windows Command Shell sub-technique
  • T1543.003 Windows Service sub-technique
  • T1489 Service Stop technique
  • T1020 Automated Exfiltration technique
  • T1105 Ingress Tool Transfer technique

Referenced by MITRE ATT&CK · uses (1)

  • G0030 Lotus Blossom group

References