Loading malware…
1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.
In 2020 and early 2021, we tracked more incidents involving the group, including its use of the DDoS-capable IRC (Internet Relay Chat) bot TNTbotinger in December 2020.
2 distinct techniques documented for this family, organized by ATT&CK tactic.
An IRC server can act as the C&C module of malware, sending commands to connected bots (infected clients).
attacks could also disrupt whole systems through resource hijacking, leading to denial of service and other interruptions to the operation.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.