s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-MAL-osx.pwnet

📛 Threat Title

Malware family: Pwnet

Category: Pwnet First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `osx.pwnet`. Printable name: Pwnet.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain osx.pwnet VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.pwnet

IOC database

Type
domain
Value
osx.pwnet
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat TF-MAL-osx.pwnet

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.pwnet

References (1)

Remediations (10)

  • web:blog.gridinsoft.com

    Microsoft says its malware and unwanted software names follow the CARO naming scheme. In a typical Defender name, the part before the colon is the type, the part after the colon is the platform, the part after the slash is the family , and a suffix beginning with ! is an internal Microsoft indicator.

  • web:echoxec.com

    Mirai Malware in 2025: Variant Behavior, Exploit Chains, and Mitigation Insights This post explores the latest Mirai botnet variants actively exploiting critical vulnerabilities in Samsung MagicINFO, DVR devices, and Wazuh servers. It highlights key behaviors observed through sandbox analysis, exploitation techniques, and provides actionable recommendations to defend against these evolving ...

  • web:macos.checkpoint.com

    This is a malware hidden in a hacked version of the game "Counter Strike: GO". An infection occurs when a user will download a hack for the game. When executed, the malware will ask the user to run it as root: Source: CheckPoint When it achieves root permissions, it will download additional files, one of which is a variant of OSX/ Pwnet .

  • web:malpedia.caad.fkie.fraunhofer.de

    Cryptocurrency miner that was distributed masquerading as a Counter-Strike: Global Offensive hack.

  • web:windowsforum.com

    The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  • web:www.breachsense.com

    Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  • web:www.cisa.gov

    It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  • web:www.microsoft.com

    Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.

  • web:www.ncsc.gov.uk

    How to defend organisations against malware or ransomware attacks.

  • web:www.researchgate.net

    This article provides a comprehensive review of the evolution of botnets, the methodologies for their detection, and the strategies employed for their mitigation .

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.