Dohdoor Malware Targets U.S. Schools and Healthcare with Multi-Stage Attack

A new malware dubbed Dohdoor is actively targeting U.S. schools and healthcare organizations with a multi-stage attack, potentially linked to North Korea. The malware uses DNS-over-HTTPS to mask its command-and-control traffic and aims to establish backdoor access for delivering follow-on payloads like Cobalt Strike.