Trend graph by period
Related keyword cloud
Top 100| # | Trend | Count | Comparison |
|---|---|---|---|
| 1 | Lumma | 1 | ▲ 1 (100%) |
| 2 | Tofsee | 1 | ▲ 1 (100%) |
| 3 | XWorm | 1 | ▲ 1 (100%) |
| 4 | AsyncRAT | 1 | ▲ 1 (100%) |
| 5 | neconyd | 1 | ▲ 1 (100%) |
| 6 | snake | 1 | ▲ 1 (100%) |
| 7 | Remcos | 1 | ▲ 1 (100%) |
| 8 | Amadey | 1 | ▲ 1 (100%) |
| 9 | FormBook | 1 | ▲ new |
| 10 | AgentTesla | 1 | ▲ 1 (100%) |
| 11 | Top | 1 | ▲ 1 (100%) |
| 12 | last | 1 | ▲ 1 (100%) |
| 13 | NetWireRC | 1 | ▲ 1 (100%) |
| 14 | Advertising | 1 | ▲ 1 (100%) |
Special keyword group
Top 5
Attacker & Actors
The status of the attacker or attack group being issued.
No data.
Technique
This is an attack technique that is becoming an issue.
No data.
Country & Company
This is a country or company that is an issue.
No data.
Threat info
Last 5SNS
(Total : 1)
Total keyword
Lumma XWorm AsyncRAT Remcos Amadey FormBook AgentTesla NetWireRC Advertising
News
(Total : 0)No data.
Additional information
| No | Title | Date |
|---|---|---|
| 1 | FBI Reports ₹1.38 Lakh Crore Loss in 2024, a 33% Surge from 2023 - Malware.News | 2025.04.29 |
| 2 | US intensifies Salt Typhoon crackdown with public info request - Malware.News | 2025.04.29 |
| 3 | Trump moves threaten US cyber defenses, says former CISA director Easterly - Malware.News | 2025.04.29 |
| 4 | Escalating attacks against Ivanti VPN appliances expected - Malware.News | 2025.04.29 |
| 5 | Critical Planet Technology switch vulnerabilities pose total takeover risk - Malware.News | 2025.04.29 |
| View only the last 5 | ||
| No | Title | Date |
|---|---|---|
| 1 | Tofsee Botnet Gets Aggressive with Russian Dating - infosecurity | 2016.09.30 |
| No | Request | Hash(md5) | Report No | Date |
|---|---|---|---|---|
| 1 |  tofsee.exePWS/Dexter Tofsee Malicious Library Malicious Packer PE File PE32 | 92e466525e810b79ae23eac344a52027 | 42678 | 2023.06.29 |
| Level | Description |
|---|---|
| danger | File has been identified by 61 AntiVirus engines on VirusTotal as malicious |
| watch | Installs itself for autorun at Windows startup |
| watch | Operates on local firewall's policies and settings |
| notice | A process created a hidden window |
| notice | Creates a service |
| notice | Creates a suspicious process |
| notice | Creates executable files on the filesystem |
| notice | Queries the disk size which could be used to detect virtual machine with small fixed size or dynamic allocation |
| notice | Uses Windows utilities for basic Windows functionality |
| info | Checks amount of memory in system |
| info | Command line console output was observed |
No data
| No | URL | CC | ASN Co | Reporter | Date |
|---|---|---|---|---|---|
| 1 | http://176.113.115.7/files/wolfgangalive0/xmsn.exe exe opendir Tofsee | RU  | ... | DaveLikesMalwre | 2025.03.24 |
| 2 | https://github.com/legendary99999/dsfksdfkds/releases/download/dsfdsfdsdf/XMZTSVYE_l10_wix4_dash.exe Tofsee | US  | MICROSOFT-CORP-MSN-AS-BLOCK | aachum | 2025.03.08 |
| 3 | http://185.215.113.97/files/1506757897/b6V4Rod.ps1 dropped-by-amadey ps1 Tofsee | aachum | 2025.02.10 | ||
| 4 | http://185.7.214.51/tank Tofsee | FR  | Qual.it S.a.s. | Gi7w0rm | 2024.12.17 |
| 5 | http://176.113.115.84:8080/4.php/987123.exe 32 exe Tofsee | RU | ... | zbetcheckin | 2024.01.14 |
| View only the last 5 | |||||
Beta Service, If you select keyword, you can check detailed information.