Saitama

Description

(Malwarebytes) Saitama backdoor abuses the DNS protocol for its command and control communications. This is stealthier than other communication methods, such as HTTP. Also, the actor cleverly uses techniques such as compression and long random sleep times. They employed these tricks to disguise malicious traffic in between legitimate traffic.

Names

Name
Saitama
Saitama Backdoor
AMATIAS

Category

Malware

Type

  • Backdoor

Information

Malpedia

Other Information

Uuid

c6b4335f-c2fe-4109-971f-12c06e9ec7ef

Last Card Change

2023-11-30