Back Cybersecuritynews

New Dohdoor Malware Attacking Schools and Health Care Sectors in U.S. via Multi

Cybersecuritynews •Tushar Subhra Dutta • February 27, 2026

A newly discovered malware campaign has been quietly targeting educational institutions and healthcare organizations across the United States since at least December 2025. The threat, tracked under the actor designation “UAT-10027,” deploys a previously unknown backdoor called “Dohdoor,” which uses an advanced combination of stealth techniques and multi-stage delivery to gain persistent access into victim […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Dohdoor Backdoor Attack Targets U.S. Education and Healthcare Sectors The UAT-10027 cyber campaign has been identified as targeting the U.S. education and healthcare sectors since at least December 2025. This campaign deploys a novel backdoor named Dohdoor, utilizing DNS-over-HTTPS for covert communications and employing advanced techniques such as DLL sideloading and process hollowing to evade detection. Initial access is likely gained through phishing attacks. 8 sources 41

Extracted Entities

New Dohdoor Malware Attacking Schools and Health Care Sectors in U.S. via Multi

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Industries (1)

Malware (1)