Sophisticated Deep#Door Backdoor Enables Espionage, Disruption

Security researchers at Securonix have uncovered Deep#Door, a sophisticated Python-based backdoor that targets Windows systems with an aggressive multi-layered approach to espionage and disruption. The malware disables security controls like Windows Defender and firewalls, establishes persistent access through multiple methods, and performs extensive surveillance including keylogging, screenshot capture, and webcam access while actively evading detection through anti-analysis checks and memory-based execution. Beyond espionage, Deep#Door can pivot to destructive operations by overwriting the Master Boot Record and crashing systems, using dynamic port construction and public tunneling to maintain covert communication with its command-and-control infrastructure.