Akbot is a computer virus and IRC-controlled backdoor associated with a large botnet. According to the provided content, it infected an estimated 1.3 million computers and added compromised systems to a botnet, where infected hosts joined IRC servers and waited for operator commands. The malware allowed remote control of infected computers and was described as capable of gathering data, terminating processes, and conducting DDoS attacks. The content associates Akbot with Owen Thor Walker of New Zealand, also known as "AKILL," who was identified as its author and linked to an international botnet investigation under Operation: Bot Roast. The botnet was reportedly used in attacks including one against the University of Pennsylvania network, and infrastructure used to operate it included exploited and rented servers, many located in Malaysia. High-confidence aliases in the provided content are limited to "Akbot."
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
6 distinct techniques documented for this family, organized by ATT&CK tactic.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
IRC-controlled backdoor malware that infected large numbers of computers, enrolled them into a botnet, and allowed remote operators to gather data, kill processes, and perform DDoS attacks.
Botnet associated with Owen "AKILL" Walker, used to orchestrate attacks (notably against the University of Pennsylvania) using exploited/rented servers (many located in Malaysia).
Botnet malware referenced in the context of FBI efforts to identify and prosecute botnet operators.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.