Dohdoor Malware — Analysis, Campaigns & Threat Activity

Related Threat Clusters

• Dohdoor Backdoor Attack Targets U.S. Education and Healthcare Sectors

  The UAT-10027 cyber campaign has been identified as targeting the U.S. education and healthcare sectors since at least December 2025. This campaign deploys a novel backdoor named Dohdoor, utilizing DNS-over-HTTPS for…

  8 articles · Updated February 26, 2026
• North Korean Intruders Target US Education and Healthcare Sectors

  Digital intruders with possible links to North Korea have been infecting the US education and healthcare sectors with a new backdoor since at least December 2025. Security researchers from Cisco Talos reported that…

  2 articles · Updated February 28, 2026
• Critical Angular SSR Vulnerability Enables Unauthorized Requests

  A critical vulnerability, tracked as CVE-2026-27739, has been identified in Angular Server-Side Rendering (SSR). This Server-Side Request Forgery (SSRF) flaw allows attackers to manipulate applications into sending…

  6 articles · Updated March 2, 2026

Recent Intelligence Reports

• Angular SSR Flaw Lets Attackers Trigger Unauthorized Server-Side Requests — Cyberpress · March 2, 2026
• Suspected Nork intruders infecting US healthcare, education — Theregister · February 28, 2026
• Suspected Nork digital intruders caught breaking into US healthcare, education orgs — Theregister · February 27, 2026
• New Dohdoor Malware Attacking Schools and Health Care Sectors in U.S. via Multi — Cybersecuritynews · February 27, 2026
• UAT — Securityaffairs.Co · February 26, 2026

Related Entities