UAT-10027 Targets U.S. Education and Healthcare with Dohdoor Backdoor

AI Summary

Cisco Talos identified UAT-10027, a new threat cluster targeting U.S. education and healthcare sectors since December 2025 with the previously unknown Dohdoor backdoor. The malware uses DNS-over-HTTPS (DoH) for command-and-control communications, demonstrating sophisticated evasion techniques against network monitoring.

Read full article → https://thehackernews.com/2026/02/uat-10027-target…

Relevance score: 92.0/100

# More from February 27

1
Cisco SD-WAN Zero-Day Under Exploitation for 3 Years Dark Reading
2
Google disrupts Сhina-linked cyberespionage campaign spanning dozens of countries
4
Aeternum C2 Botnet Stores Encrypted Commands on Polygon Blockchain to Evade Takedown The Hacker News
5
Trend Micro warns of critical Apex One code execution flaws BleepingComputer
6
Critical Juniper Networks PTX flaw allows full router takeover BleepingComputer
7
Previously harmless Google API keys now expose Gemini AI data BleepingComputer
8
Zyxel warns of critical RCE flaw affecting over a dozen routers BleepingComputer
9
European DYI chain ManoMano data breach impacts 38 million customers BleepingComputer
10
Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware The Hacker News