Description
Salgorea is a backdoor used by the APT32 intrusion set, documented by multiple research teams in campaigns that also involved the wider OceanLotus toolset.
Stats
- First seen
- March 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Salgorea.2 |
| Gen:Variant.Salgorea.3 |
| Win32.Backdoor.Salgorea |
| Win32.Trojan.Salgorea |
| Win64.Backdoor.Salgorea |