AmpleBotMalware
- BlackRock
This malware was initially named BlackRock and later renamed to AmpleBot.From MISP Galaxy
Last reported 2 months ago, by AhnLab ASEC1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
July 2026 Security Issues in Korean & Global Financial Sector“In a post related to BlackRock, internal infrastructure documents for the Amelia platform were disclosed; these were confirmed to include internal hostnames, FQDNs, VPN tunnel addresses, and information on development, operations, and disaster recovery environments.”
Indicators in its reports
named in the reports above- check-host[.]netin 1 report
Copy this indicator · defanged
Thanks — we review every report.