Hannotog
- ID
- S1211
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 5 Apr 2025
Hannotog is a type of backdoor malware uniquely assoicated with Lotus Blossom operations since at least 2022.[1]
Techniques used (7)
- T1020 Automated Exfiltration
- T1059.003 Windows Command Shell
- T1105 Ingress Tool Transfer
- T1489 Service Stop
- T1543.003 Windows Service
- T1571 Non-Standard Port
- T1686 Disable or Modify System Firewall