TF-MAL-ps1.lightbot
📛 Threat Title
Malware family: LightBot
Description
ThreatFox malware family `ps1.lightbot`. Printable name: LightBot.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
ps1.lightbot
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/ps1.lightbot
IOC database
- Type
- domain
- Value
ps1.lightbot- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-ps1.lightbot
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/ps1.lightbot
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybersecuritynews.com
A sophisticated malware campaign dubbed "Clickfix" has emerged, targeting users through deceptive browser notifications and pop-ups that prompt immediate action through "Fix Now" and "Bot Verification" buttons.
-
web:forums.malwarebytes.com
Hi! So I randomly scanned my computer and Malwarebytes detected 13 files on my computer as malware ai. I have the basic scan report, and I know that I need to gather some more files. I'd be really grateful to have some help!
-
web:greatis.com
Over the past week, several researchers have spotted a new phishing campaign called LightBot , which was normally used to distribute TrickBot's BazarLoader, has started installing a malicious PowerShell script instead. LightBot phishing emails pretend to be from the sources such as the legal department notifying users about a customer complaint.
-
web:learn.microsoft.com
If your organization is using Defender for Endpoint (or Defender for Business), automated investigation and remediation capabilities can save your security operations team time and effort. As outlined in this blog post, these capabilities mimic the ideal steps that a security analyst takes to investigate and remediate threats.
-
web:malpedia.caad.fkie.fraunhofer.de
According to Bleeping Computer and Vitali Kremez, LightBot is a compact reconnaissance tool suspected to be used to identify high-value targets for potential follow-up ransomware attacks.
-
web:snyk.io
On March 24, 2026, threat actor known as TeamPCP published backdoored versions of the litellm Python package after stealing PyPI credentials via a compromised Trivy GitHub Action in LiteLLM's CI/CD pipeline. Here's what happened, how the three-stage malware works, and how to check if you're affected.
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.enigmasoftware.com
SpyHunter is a powerful malware remediation and protection tool designed to help provide users with in-depth system security analysis, detection and removal of a wide range of threats like LightBot as well as a one-on-one tech support service.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.