--- title: Mysterious 'Sandman' APT Targets Telecom Sector With... description: "Sandman" is a group of unknown origin that surfaced mirage-like in August. Researchers at SentinelOne are tracking the backdoor as "LuaDream" after observing... canonical: https://daily.dev/posts/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor-x4spo6mq8 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor | daily.dev og:description: "Sandman" is a group of unknown origin that surfaced mirage-like in August. Researchers at SentinelOne are tracking the backdoor as "LuaDream" after observing... og:url: https://daily.dev/posts/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor-x4spo6mq8 og:image: https://api.daily.dev/og/posts/x4sPO6mq8.png og:image:alt: Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor **[Dark Reading](https://daily.dev/sources/dr)** · 3 min read · 0 upvotes · 0 comments ## Summary "Sandman" is a group of unknown origin that surfaced mirage-like in August. Researchers at SentinelOne are tracking the backdoor as "LuaDream" after observing it in attacks on telecommunications companies in the Middle East, Western Europe, and South Asia. The malware is highly modular with an array of functions for stealing system and user information. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#kaspersky](https://daily.dev/tags/kaspersky), [#malware](https://daily.dev/tags/malware), [#sentinelone](https://daily.dev/tags/sentinelone) [View this post on daily.dev](https://daily.dev/posts/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor-x4spo6mq8) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor","url":"https://daily.dev/posts/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor-x4spo6mq8","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor-x4spo6mq8"},"datePublished":"2023-09-21T22:08:11.016Z","dateModified":"2023-12-23T02:13:45.990Z","description":"\"Sandman\" is a group of unknown origin that surfaced mirage-like in August. Researchers at SentinelOne are tracking the backdoor as \"LuaDream\" after observing...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/57c0d392c19829a72a159e838351b01b?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/57c0d392c19829a72a159e838351b01b?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/mysterious-sandman-apt-targets-telecom-sector-with-novel-backdoor-x4spo6mq8","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,kaspersky,malware,sentinelone","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor"}]} ```