TF-1815717 medium

Description

Indicator that identifies a botnet command&control server (C&C). IOC type: URL that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 50. First seen: 2026-05-17 18:50:48 UTC. Reporter: anonymous.

Indicators of Compromise (3)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (2)

• Malpedia profile ThreatFox IOCs
• ThreatFox IOC page ThreatFox IOCs

  Indicator that identifies a botnet command&control server (C&C). IOC type: URL that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 50. First seen: 2026-05-17 18:50:48 UTC. Reporter: anonymous.

• abuse.ch | Fighting malware and botnets
  web:abuse.ch

  Varying in focus areas, all platforms are designed to help identify, track, and mitigate against malware and botnet -related cyber threats. The abuse.ch community, anti-virus vendors and threat intelligence providers can contribute and consume from the following platforms:

  2026-05-22 05:14 UTC
• Botnet Malware Analysis, Overview by ANY.RUN
  web:any.run

  Botnet malware can be delivered through various means, including phishing emails, malware -infected websites, and even USB drives. Once a device becomes infected, the botnet malware establishes a connection with a command-and-control (C&C) server, essentially becoming a node in the botnet network.

  2026-05-22 05:14 UTC
• Botnet Infection Findings - Bitsight Knowledge Base
  web:help.bitsighttech.com

  ⇤ Compromised Systems Findings The Botnet Infections risk vector is an indication of a host participating in a botnet , including active bots and Command and Control servers ( C&C servers). Navi...

  2026-05-22 05:14 UTC
• Check Malicious IPs & Domains - Real-Time Threat Intelligence | IsMalicious
  web:ismalicious.com

  Comprehensive threat intelligence database with 500M+ malicious IPs, domains, and cyberthreat data. Check phishing sites, malware , adware, tracking domains & vulnerabilities. Real-time blocklist API for cybersecurity professionals. Try free!

  2026-05-22 05:14 UTC
• Malware Hunter
  web:malware-hunter.shodan.io

  Malware Hunter is a specialized Shodan crawler that explores the Internet looking for command & control (C2s) servers for botnets . It does this by pretending to be an infected client that's reporting back to a C2.

  2026-05-22 05:14 UTC
• Recognizing Botnet Command and Control Made Simple
  web:networkthreatdetection.com

  Learn how recognizing botnet command and control patterns reveals hidden threats and keeps your network safe from malicious attacks.

  2026-05-22 05:14 UTC
• URL Scanner - Cloudflare Radar
  web:radar.cloudflare.com

  Understand the security, performance, technology, and network details of a URL with a publicly shareable report.

  2026-05-22 05:14 UTC
• JavaScript to Command-and-Control (C2) Server Malware
  web:www.cyfirma.com

  The use of jilas.net as the initial JavaScript payload source, combined with a trusted open source tool for encoded command retrieval, highlights a strategic approach to malware distribution.

  2026-05-22 05:14 UTC
• Live botnet threats worldwide | Spamhaus Technology
  web:www.spamhaus.com

  Explore the Spamhaus Live Botnet Threat Map. Track global botnet activity in real time and see where malware and infected devices are operating worldwide.

  2026-05-22 05:14 UTC
• Botnet Controller List (BCL) | Botnet C&C datasets | Spamhaus
  web:www.spamhaus.org

  The Spamhaus Botnet Controller List (BCL) is a specialized, advisory "drop all traffic" list. It consists of IP addresses that are actively used by cybercriminals to control malware -infected computers (bots). This is a high-confidence list, with false positives being extremely rare, to block as much high-risk, malicious traffic as possible.

  2026-05-22 05:14 UTC

Only Available for Registered Users. Sign in to view.