---
title: "Discussion on \"MoiClient: Backdoor That Hides Inside SumatraPDF\" | Hashnode"
description: "Discussion on \"MoiClient: Backdoor That Hides Inside SumatraPDF\". Overview\nOn September 2, 2026, AhnLab ASEC (ATCP team) published an analysis of MoiClient — a newly identified Windows backdoor distributed via a fake invoice email, deploying a notable multi-layer de"
url: "https://hashnode.com/posts/moiclient-backdoor-that-hides-inside-sumatrapdf/6a9bcb961ac691f454c5d4b6"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [MoiClient: Backdoor That Hides Inside SumatraPDF](https://blog.fiscybersec.com/moiclient-backdoor-that-hides-inside-sumatrapdf?utm_source=hashnode&utm_medium=feed)

Overview On September 2, 2026, AhnLab ASEC (ATCP team) published an analysis of MoiClient — a newly identified Windows backdoor distributed via a fake invoice email, deploying a notable multi-layer de

Sep 5 · 18 min read · blog.fiscybersec.com  
Read the article

-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)
-   [#backdoor](https://hashnode.com/tag/backdoor)
-   [#dll-side-loading](https://hashnode.com/tag/dll-side-loading)
-   [#uac-bypass](https://hashnode.com/tag/uac-bypass)
-   [#infostealer](https://hashnode.com/tag/infostealer)

## Written by

[Đinh Văn Mạnh](https://hashnode.com/@PrismWalker)

@PrismWalker

  
[View profile](https://hashnode.com/@PrismWalker)

Go big or go home

## Responses

Markdown supported · ⌘↵ to post

No responses yet.