Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
A new botnet called Void has emerged on the cybercrime underground... Void Botnet routes its commands through Ethereum smart contracts... First advertised in March 2026 on a Russian-language cybercrime forum, the botnet is sold as a ready-to-use loader priced at $600 with an additional $50 fee charged per build.
7 distinct techniques documented for this family, organized by ATT&CK tactic.
Persistence is established through a scheduled task that was introduced in the v1.1 update.
Payloads can be delivered as executables, DLLs, MSI packages, or PowerShell scripts. Reverse shell and PowerShell tasks open live interactive sessions on compromised machines...
Persistence is established through a scheduled task that was introduced in the v1.1 update.
Persistence is established through a scheduled task that was introduced in the v1.1 update.
A dedicated in-memory execution mode loads binaries directly into process memory without touching the disk, bypassing defenses that rely on file-based scanning.
Instead of relying on traditional servers that authorities can seize or shut down, Void Botnet routes its commands through Ethereum smart contracts... At the heart of Void Botnet is a dual-mode command-and-control system packed into a single binary. In decentralized mode, the operator writes instructions to an Ethereum smart contract, and infected machines check that contract at regular intervals... The second mode connects machines directly to the operator’s web panel.
The threats this botnet enables span a wide range, including DDoS campaigns, credential theft, and proxy-as-a-service operations.
Payloads can be delivered as executables, DLLs, MSI packages, or PowerShell scripts.
Reverse shell and PowerShell tasks open live interactive sessions on compromised machines...
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.