TF-1815712 medium

Description

Indicator that identifies a botnet command&control server (C&C). IOC type: URL that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 50. First seen: 2026-05-17 18:50:47 UTC. Reporter: anonymous.

Indicators of Compromise (4)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a botnet command&control server (C&C). IOC type: URL that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 50. First seen: 2026-05-17 18:50:47 UTC. Reporter: anonymous.

• Botnet Malware Analysis, Overview by ANY.RUN
  web:any.run

  Botnet malware can be delivered through various means, including phishing emails, malware -infected websites, and even USB drives. Once a device becomes infected, the botnet malware establishes a connection with a command-and-control (C&C) server, essentially becoming a node in the botnet network.

  2026-05-22 05:14 UTC
• Botnet detection: Tools, techniques, and how to stop digital armies
  web:clickpatrol.com

  A botnet is a network of devices infected by malware . Malware is the malicious software used to control the device; the botnet is the collective group of infected devices acting under a single controller.

  2026-05-22 05:14 UTC
• Botnet Infection Findings - Bitsight Knowledge Base
  web:help.bitsighttech.com

  ⇤ Compromised Systems Findings The Botnet Infections risk vector is an indication of a host participating in a botnet , including active bots and Command and Control servers ( C&C servers). Navi...

  2026-05-22 05:14 UTC
• Recognizing Botnet Command and Control Made Simple
  web:networkthreatdetection.com

  Learn how recognizing botnet command and control patterns reveals hidden threats and keeps your network safe from malicious attacks.

  2026-05-22 05:14 UTC
• URLhaus | Malware URL exchange
  web:urlhaus.abuse.ch

  Use the APIs, to seamlessly push and pull signals, and automate bulk queries. With this intelligence, gain insights into malware behavior, to help identify, track, and mitigate against malware and botnet -related cyber threats.

  2026-05-22 05:14 UTC
• What Is a Botnet? | Free Botnet Scanning & Removal - Avast
  web:www.avast.com

  A botnet is a network of infected computers that can be controlled remotely and forced to send spam, spread malware , or stage DDoS attacks — without the consent of the device owners. Learn how botnets work and how to protect your computer against them and the malware they often carry with a reliable and free botnet protection tool.

  2026-05-22 05:14 UTC
• JavaScript to Command-and-Control (C2) Server Malware
  web:www.cyfirma.com

  The use of jilas.net as the initial JavaScript payload source, combined with a trusted open source tool for encoded command retrieval, highlights a strategic approach to malware distribution.

  2026-05-22 05:14 UTC
• An attempt to communicate with a botnet or command and control ... - Reddit
  web:www.reddit.com

  Had a similar issue about a year ago in a client network. The source Ip in my case was an on-prem DNS server. I enabled logging on the dns server to track which device on the network was actually querying lookups to botnet sites. A host was infected and had a windows task scheduler to kick off twice a day. So look for clues like that in your net.

  2026-05-22 05:14 UTC
• Live botnet threats worldwide | Spamhaus Technology
  web:www.spamhaus.com

  Explore the Spamhaus Live Botnet Threat Map. Track global botnet activity in real time and see where malware and infected devices are operating worldwide.

  2026-05-22 05:14 UTC
• Botnet Controller List (BCL) | Botnet C&C datasets | Spamhaus
  web:www.spamhaus.org

  The Spamhaus Botnet Controller List (BCL) is a specialized, advisory "drop all traffic" list. It consists of IP addresses that are actively used by cybercriminals to control malware -infected computers (bots). This is a high-confidence list, with false positives being extremely rare, to block as much high-risk, malicious traffic as possible.

  2026-05-22 05:14 UTC

Only Available for Registered Users. Sign in to view.