Anubis ransomware deploys Lindnor backdoor in US attack
Anubis ransomware operators broke into a US organization deploying custom Lindnor backdoor and 13 security-killing tools including vulnerable drivers.
70
Threat actor
Hawkmoth
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 9, 2026
- Last mentioned2d ago
Timeline
2 articles · newest firstHawkmoth deploys custom Lindnor backdoor in Anubis ransomware attack
U.S. organization hit with Anubis ransomware via Lindnor backdoor on SQL servers; security tools disabled but encryption blocked.
70
Appears with
- Lindnormalware · 2
- Anubismalware · 2
- Symantecvendor · 2
- Microsoft SQL Serverproduct · 1
- US organizationvictim · 1
- U.S. organizationvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.