Lancefly APT Uses Custom Backdoor to Target Orgs in Government, Aviation, Other Sectors

The custom backdoor called Merdoor is used very selectively, appearing on just a handful of networks and a small number of machines over the years, with its use appearing to be highly targeted.