Skip to content

S0187 · malware · ATT&CK software

Daserf

1 actor on record using it

Every mark is an actor ATT&CK records using this software. Red ones also exploit a CVE in CISA KEV.

Open S0187 on attack.mitre.org

Daserf is a backdoor that has been used to spy on and steal from Japanese, South Korean, Russian, Singaporean, and Chinese victims. Researchers have identified versions written in both Visual C and Delphi.

Source: MITRE ATT&CK, S0187. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Also known as
Muirim, Nioupale

Every one of the 1 is a mark on the map. Named now: 1 to 1, most on record first.

  1. BRONZE BUTLERChina3 CVEs · 40 techniques · 14 software · 3 in CISA KEV

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.