BobikMalware
This malware offers remote access capabilities but also has a DDoS module that was used against supporters of Ukraine.From MISP Galaxy
Last reported 16 days ago, by Security Affairs1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Italy’s Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review“Avast researchers saw it using the Bobik botnet for DDoS attacks as early as September 2022.”
Indicators in its reports
named in the reports above- attiva.fastweb[.]itin 1 report
- sind[.]itin 1 report
- whs.activenetwork[.]itin 1 report
- bp.activenetwork[.]itin 1 report
- sistemagalileo[.]itin 1 report
- www.activenetwork[.]itin 1 report
- webtop.we-com[.]itin 1 report
- www.fastweb[.]itin 1 report
- concorsi.difesa[.]itin 1 report
- sondaggi.bimedia[.]itin 1 report
- www.aeronautica.difesa[.]itin 1 report
- www.giorgiameloni[.]itin 1 report
- www.istitutospiov[.]itin 1 report
- www.marina.difesa[.]itin 1 report
- www.uni[.]comin 1 report
Copy these 15 indicators · defanged
Thanks — we review every report.