SalityMalware
F-Secure states that the Sality virus family has been circulating in the wild as early as 2003. Over the years, the malware has been developed and improved with the addition of new features, such as rootkit or backdoor functionality, and so on, keeping it an active and relevant threat despite the relative age of the malware.From MISP Galaxy
Last reported 13 days ago, by AhnLab ASEC4 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1684Social Engineering
“Phantom Deal profile: Gen Digital has stumbled upon a cybercrime group that poses as executives who use WhatsApp social-engineering to trick victims into investing or acquiring fake companies.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
4 reports, newest first · the exact sentence from each-
September 2026 Dark Web Threat Actor Trend Report“…er Oleksii-Lytvynenko Operation-PowerOFF Pepijn-van-der-Stap Poland PwnForums RaidForums RansomHouse Ransomware RBL-LEVIATHAN-GHOST Ryuk Sality Saudi-Arabia seizure Sentencing ShinyHunters source-code-leak supply-chain-attack T1ER0NE Taiwan TakeDown Telecommunications transportat…”
-
Srsly Risky Biz: America's Drivers Licence Breach is a National Security Disaster“Sality botnet takedown: Last week the US Department of Justice and Europol announced that an international operation had disrupted the Sality botnet.”
-
Risky Bulletin: Russia tells data centers to deploy drone defenses“Authorities take down Sality botnet: An international law enforcement operation has disrupted the Sality peer-to-peer botnet.”
-
International Operation Disrupts Sality P2P Botnet“International Operation Disrupts Sality P2P Botnet”
Indicators in its reports
named in the reports above- idscan[.]netin 1 report
- crypto[.]newsin 1 report
- tender[.]fiin 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.