TF-MAL-js.icecube

Description

ThreatFox malware family `js.icecube`. Printable name: IceCube.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• LetsDefend's DFIR Challenge: IcedID Malware Family Walk-Through
  web:cybergladius.com

  A walk-through of the IcedID Malware Family for the LetsDefend's DFIR Challenge. An analysis of the IcedID malware and how to defend against it.

  2026-07-27 19:10 UTC
• BPFDoor and Symbiote Rootkits Attacking Linux Systems Exploiting eBPF ...
  web:cybersecuritynews.com

  Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.

  2026-07-27 19:10 UTC
• IceCube (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  According to Proofpoint, IceCube is a JavaScript-based stealer likely developed with the assistance of a large language model, targeting Roundcube webmail instances. It escapes the webmail's iFrame context via DOM traversal to access the full document and the authentication session, then exfiltrates usernames, passwords, two-factor authentication material, cookies, and browser reconnaissance ...

  2026-07-27 19:10 UTC
• Malware Families - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  This page gives an overview of all malware families that are covered on Malpedia, supplemented with some basic information for each family .

  2026-07-27 19:10 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-07-27 19:10 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-07-27 19:10 UTC
• New eBPF Filters for Symbiote and BPFdoor Malware
  web:www.fortinet.com

  FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.

  2026-07-27 19:10 UTC
• Worm:Win32/Icecubes.A@mm - microsoft.com
  web:www.microsoft.com

  Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.

  2026-07-27 19:10 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection

  2026-07-27 19:10 UTC
• Mitigation measures can reduce malware risk by 50%-80%: CyberCube ...
  web:www.reinsurancene.ws

  Patch management, network segmentation, and data backups can reduce the likelihood and financial impact of widespread malware attacks by 50% to 80% when effectively implemented, according to a joint study by CyberCube and Munich Re. The two firms have published key findings from a study on severe cyber accumulation events and how effective mitigation measures can improve organisational ...

  2026-07-27 19:10 UTC

Only Available for Registered Users. Sign in to view.