H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

SslMM

[SslMM](https://attack.mitre.org/software/S0058) is a full-featured backdoor used by [Naikon](https://attack.mitre.org/groups/G0019) that has multiple variants. (Citation: Baumgartner Naikon 2015)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[SslMM](https://attack.mitre.org/software/S0058) is a full-featured backdoor used by [Naikon](https://attack.mitre.org/groups/G0019) that has multiple variants. (Citation: Baumgartner Naikon 2015)

Labels

malware
10 recorded

Relationships

uses
from Naikon
Group
uses
to Access Token Manipulation
Technique
uses
to Disable or Modify Tools
Technique
uses
to Fallback Channels
Technique
uses
to Keylogging
Technique
uses
to Match Legitimate Resource Name or Location
Technique
uses
to Registry Run Keys / Startup Folder
Technique
uses
to Shortcut Modification
Technique
uses
to System Information Discovery
Technique
uses
to System Owner/User Discovery
Technique
2 external

References

mitre-attack
S0058
open
Baumgartner Naikon 2015
https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07205555/TheNaikonAPT-MsnMM1.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance