H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Vasport

[Vasport](https://attack.mitre.org/software/S0207) is a trojan used by [Elderwood](https://attack.mitre.org/groups/G0066) to open a backdoor on compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Vasport May 2012)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Vasport](https://attack.mitre.org/software/S0207) is a trojan used by [Elderwood](https://attack.mitre.org/groups/G0066) to open a backdoor on compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Vasport May 2012)

Labels

malware
5 recorded

Relationships

uses
from Elderwood
Group
uses
to Ingress Tool Transfer
Technique
uses
to Proxy
Technique
uses
to Registry Run Keys / Startup Folder
Technique
uses
to Web Protocols
Technique
4 external

References

mitre-attack
S0207
open
Vasport
—
Symantec Elderwood Sept 2012
https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf
open
Symantec Vasport May 2012
https://www.symantec.com/security_response/writeup.jsp?docid=2012-051606-5938-99
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance