TF-1868519
high
📛 Threat Title
Unknown malware: Domain that is used for botnet Command&control (C&C) js-mirror.com
Description
Indicator that identifies a botnet command&control server (C&C). IOC type: Domain that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-08-04 20:53:34 UTC. Reporter: threatcat_ch. Tags: npm.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
js-mirror.com
UrlVoid 0 / 35
IOC database
- Type
- domain
- Value
js-mirror.com- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Domain that is used for botnet Command&control (C&C) attributed to Unknown malware
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
- Malpedia profile ThreatFox IOCs
-
ThreatFox IOC page
ThreatFox IOCs
Indicator that identifies a botnet command&control server (C&C). IOC type: Domain that is used for botnet Command&control (C&C). Attributed malware: Unknown malware. Confidence: 100. First seen: 2026-08-04 20:53:34 UTC. Reporter: threatcat_ch. Tags: npm.
Remediations (10)
-
web:help.bitsighttech.com
⇤ Compromised Systems Findings The Botnet Infections risk vector is an indication of a host participating in a botnet , including active bots and Command and Control servers ( C&C servers). Navi...
-
web:securityboulevard.com
Botnet Command & Controller (C&C) activity increased 24% this period, with Remote Access Trojans (RATs) accounting for 42% of the Top 20 malware associated with botnets . Learn which Russia-based registrar saw a +9,608% surge in botnet C&C domains—and which major cloud providers are taking action. Read the full report.
-
web:www.crowdstrike.com
What are command and control attacks? C&C (also known as C2) is a method that cybercriminals use to communicate with compromised devices within a target company's network. In a C&C attack, an attacker uses a server to send commands to — and receive data from — computers compromised by malware . This server is also known as a C2 or C&C server.
-
web:www.cyfirma.com
The use of jilas.net as a payload host suggests a compromised or attacker-controlled infrastructure, emphasizing the need for enhanced network monitoring, domain analysis, and proactive threat intelligence measures to detect and neutralize such evolving threats.
-
web:www.geeksforgeeks.org
At this point, the infected devices are connected and controlled remotely through a central command-and-control (C&C) server. The attacker can command these devices, to perform tasks like sending spam, participating in distributed denial-of-service (DDoS) attacks, or stealing data. How to Prevent Botnet Attacks?
-
web:www.radware.com
Botnet detection involves identifying networks of infected computers controlled by attackers to perform malicious activities. Early detection can prevent substantial damage to systems and networks, requiring techniques to monitor and analyze behavior patterns, traffic anomalies, and communication protocols.
-
web:www.radware.com
Signature and Heuristic Detection Signature-based detection involves matching observed network or host behaviors against a database of known malware indicators, command-and-control (C&C) server IPs, or other established botnet patterns. This approach is efficient for rapidly identifying threats that have been previously documented. As malware signatures are updated continually, signature-based ...
-
web:www.spamhaus.org
Get the latest insights on the botnet command and controllers ( C&Cs ) our researchers are observing, including geolocation and who is hosting them. Access the full report here.
-
web:www.spamhaus.org
Botname_Malpedia - corresponding malware family name in Malpedia IP Address - of the C&C server Seen - date the C&C server was last observed This enriched data allows security teams to cross-reference suspicious activity within their constituency against known botnet C&C metadata, enabling faster identification, escalation, and remediation .
-
web:www.trendmicro.com
The logs documented how the threat actor used an AI agent to migrate a command-and-control (C&C) server, and to control a small-scale botnet , among other hacking activities.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.