Hupigon, also known as Graftor, is a backdoor Trojan malware family. It has been detected under the names Backdoor.Win32.Hupigon, Trojan.Win32.Hupigon, Backdoor.Win32.Graftor, and Trojan.Win32.Graftor, with additional vendor aliases including Trojan.Win32.Boht and Backdoor:Win32/Bezigate. According to the provided content, its first known detection dates to November 2008. Hupigon is primarily used to connect victim systems into a botnet (described as a zombie network) and is operated through a command-and-control center supervising infected hosts. The malware can spread through networks to infect additional computers, but the content states it does not spread automatically like a worm. The family contains many variants, which the content says are written in Borland Delphi. Samples are usually portable executable files and may be packed with UPX. The content attributes Hupigon to Red Apollo and lists affected platforms as Windows, Linux, iOS, and Android.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
4 distinct techniques documented for this family, organized by ATT&CK tactic.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A backdoor trojan used to connect victim PCs into a botnet. It can spread through networks to infect other computers, though it does not spread automatically like a worm and is instead operated through command-and-control infrastructure. The family has many variants and is written in Borland Delphi.
2008 Agent.BTZ Asprox Conficker Fun.exe Hupigon Mariposa MonaRonaDona OpenCandy
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.