Supper Backdoor Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 6, 2025
Last Seen
November 7, 2025

Supper Backdoor is a malware family tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed November 6, 2025; most recent activity November 7, 2025.

Overview

Supper Backdoor is a malware family associated with a Gootloader-driven campaign that re-emerged to deliver ransomware. The backdoor functions as an initial access/persistence component in the infection chain, enabling the ransomware payload, highlighting a notable resurgence in Gootloader activity and evolving downloader-to-ransomware tactics.

Related Threat Clusters

  • Gootloader Malware Resurfaces, Compromises Domain Controllers

    Gootloader malware, known for delivering ransomware, has re-emerged after reduced activity, with Huntress reporting three infections since October 27, 2025. Two of these incidents resulted in hands-on-keyboard…

    2 articles · Updated November 7, 2025
  • Gootloader Malware Resurfaces, Compromises Domain Controllers

    Gootloader malware has re-emerged after a period of reduced activity, with Huntress reporting three infections since October 27, 2025. Two of these incidents resulted in hands-on-keyboard intrusions, leading to domain…

    4 articles · Updated November 7, 2025

Recent Intelligence Reports

  • Gootloader malware back for the attack, serves up ransomware — Theregister · November 7, 2025
  • Gootloader malware back for the attack, serves up ransomware — Theregister · November 6, 2025

CVSS v3.1 Breakdown