Backdoor
Also called: back door
An undocumented way into a system that bypasses normal authentication. It may be planted by an attacker after a breach, such as a hidden account, implant or modified file, or exist in a product as an undisclosed access path. Patching a vulnerability does not remove a backdoor already installed, so devices exposed to an exploited flaw should also be checked for unknown accounts, files and scheduled tasks.
Further reading: csrc.nist.gov
Advisories that mention this term
Linux backdoor CWPdoor hides in trojanized CWP panel server cwpsrv and suppresses access logs
QiAnXin XLab says it captured a suspicious script, cwpsrv_update.
XCPE Botnet: Android Set-Top Boxes Shipped with Preloaded Backdoor; ~88,000 Devices Infected in Taiwan, 5th Globally
Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.
BITTER espionage group deploys new PapRAT backdoor via three infection chains targeting South Asian organizations
Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .
CNCERT warns that the Jianpian Player for Windows has a built-in backdoor and has infected more than 700,000 devices
China’s CNCERT warned on 9 October that the Windows “Jianpian Player” downloaded from the so-called official Jianpian site (www.