We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Backdoor:Win32/Haxdoor.IF
Detected by Microsoft Defender Antivirus
Aliases: Win32/Haxdoor.Variant!Sys!Trojan (CA) Backdoor.Win32.Haxdoor.ho (Kaspersky) BackDoor-BAC.sys (McAfee) W32/Haxdoor.ACG (Norman) Troj/Haxdor-Gen (Sophos) Backdoor.Haxdoor (Symantec)
Summary
Backdoor:Win32/Haxdoor.IF is a backdoor Trojan that allows remote control of the machine over the Internet. The Trojan is rootkit-enabled, allowing it to hide processes and files related to the threat. Backdoor:Win32/Haxdoor.IF lowers security settings on the computer, gathers user and system information and sends it to a third party