Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknownAdvanced sophistication

Larva-24010

Larva-24010 is a threat actor group, tracked by Brandefense. It uses 3 MITRE ATT&CK techniques.

Request IOC feedRequest ATT&CK export
Techniques
3
Exploited CVEs
No CVE data
First seen
Nov 22, 2025
Last seen
Nov 22, 2025
Record updated

About Larva-24010.

A threat actor tracked by ASEC, responsible for a sophisticated malware distribution campaign targeting South Korean VPN providers. They utilize trojanized VPN installers to deploy advanced backdoors like NKNShell, leveraging blockchain and IoT protocols for C2, and show increasing sophistication, possibly aided by generative AI.

Last updated Jul 24, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.