Trusted Design

Affiliate’s Malspam Operation: Kovter and Miuref/Boaxxe

概要

In March of this year, reports of malspam campaigns utilizing an email attached “.doc.js” files, which tied back to the Kovter and Boaxxe clickfraud trojans. The analysis of these malware families have already been well documented here and here. Therefore, this post will concentrate on the botnet behind the malspam delivery and subsequent download for these recent malspam campaigns. It is believed that the miscreants behind the development of these trojans use an affiliate model to have their malicious wares infect victims via botnet or exploit kit operators.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Necurs Botnet Fuels Massive Spam Campaigns Spreading Jaff Ransomware (score: 0.71)
• WordPress Compromise Campaign (score: 0.69)
• Malicious spam serve zip archives of javascript files (score: 0.67)
• Ransomware: Kovter, Boaxxe, and Miuref (score: 0.67)
• Malspam pushing Locky ransomware tries HoeflerText notifications for Chrome and FireFox (score: 0.66)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る