PhorpiexMalware
- phorphiex
- Trik
Proofpoint describes Phorpiex/Trik as a SDBot fork (thus IRC-based) that has been used to distribute GandCrab, Pushdo, Pony, and coinminers. The name Trik is derived from PDB strings.From MISP Galaxy
Last reported 2 years ago, by Group-IB1 report
What the reports say
1 report, newest first · the exact sentence from each-
Ransomware manager: Investigation into farnetwork, a threat actor linked to five strains of ransomware“…ransomware was distributed in different ways, including phishing emails, RDP, RIG and Radio exploit kits, a PayPal phishing site, and the Trik botnet (aka Wortrik, Phorpiex).”
Indicators in its reports
named in the reports above- exploit[.]inin 1 report
- pentest-tools[.]comin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.