Doris

Malware updated a month ago (2024-11-29T13:57:07.947Z)
Download STIX
Preview STIX
"Doris" is a form of malware, base64 encoded and known as an implant alongside another called "Torisma". These harmful programs are designed to exploit and damage computer systems or devices, typically infiltrating through suspicious downloads, emails, or websites. Once inside, they can disrupt operations, steal personal information, or even hold data hostage for ransom. The discovery of these malware types has raised concerns about cybersecurity, especially in light of recent incidents where Chinese hackers potentially accessed sensitive information including court-authorized network wiretapping requests and internet traffic. In response to the growing threat of cyber attacks, particularly those targeting K-12 educational institutions, U.S. lawmakers took action. In April 2023, Representative Zach Nunn proposed the bipartisan Enhancing K–12 Cybersecurity Act, co-led by Representative Doris Matsui. This was followed by a call from the Federal Communications Commission (FCC) to reevaluate its E-rate program, prompted by a letter from Rep. Matsui urging the agency to coordinate with other federal bodies to bolster K-12 cybersecurity efforts. The act, S. 1191, was cosponsored by U.S. Senator Mark Warner, and a companion bill, H.R. 2845, was introduced by Reps. Matsui and Nunn on April 25. Despite these legislative efforts, cybersecurity remains a critical concern. Notably, Doris Woltz, director of the Service de Renseignement de l'État (SRE), resigned from her position in November 2024, with her resignation formally accepted according to the country's legal gazette. Following her retirement, the government decided to confer the honorary title of her functions on Ms. Woltz. Her departure underscores the ongoing challenges in managing cybersecurity threats, such as the Doris malware, emphasizing the need for continued vigilance and strategic action.
Description last updated: 2024-10-15T00:15:36.532Z
What's your take? (Question 1 of 1)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Chinese
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Malware
To see the evidence that has resulted in these malware associations, create a free account
Alias DescriptionAssociation TypeVotes
The Torisma Malware is associated with Doris. Torisma is a sophisticated malware implant discovered during an in-depth analysis of suspicious cyber activities. The malware, along with another implant called Doris, are base64 encoded and embedded within ASP server-side scripts. These scripts contain code to create a binary stream where the Torisis related to
2