HIUPAN
- ID
- S1230
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 22 Oct 2025
HIUPAN (aka U2DiskWatch) is a is a worm that propagates through removable drives known to be leveraged by Mustang Panda and was first observed utilized in 2024. [1][2]
Techniques used (9)
- T1057 Process Discovery
- T1091 Replication Through Removable Media
- T1112 Modify Registry
- T1120 Peripheral Device Discovery
- T1204.002 Malicious File
- T1547.001 Registry Run Keys / Startup Folder
- T1564.001 Hidden Files and Directories
- T1574.001 DLL
- T1678 Delay Execution