Check PointPublished
Phorpiex botnet is back with a new Twizt: Hijacking Hundreds of crypto transactions
By alexeybu
Excerpt
Research by: Alexey Bukhteyev
Check Point Research (CPR) spotted the resurgence of Phorpiex, an old threat known for its sextortion spam campaigns, crypto-jacking, cryptocurrency clipping and ransomware spread
The new variant “Twizt” enables the botnet to operate successfully without active C&C servers Phorpiex crypto-clipper supports more than 30 wallets for different blockchains
In one year, Phorpiex bots hijacked 969 transactions and stole 3.64 Bitcoin, 55.87 Ether, and $55,000 in ERC20 tokens accounting for almost half a million in US dollars
Background
Phorpiex, an old threat known since 2016, was initially known as a bot…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Check Point on research.checkpoint.com.
Mentioned in the excerpt
More from Check Point88
- Gozi: The Malware with a Thousand FacesCheck Point · Published 28 Aug 2020
- Shattering the Dream - When a Job Offer Becomes a Zero-Day AttackCheck Point · Published 11 Aug
- Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution EcosystemCheck Point · Published 3 Jun
- Cavern Manticore: Exposing Iran-Linked Modular C2 FrameworkCheck Point · Published 6 Jul
On the same topics
- Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware FamilySilent Push · Published 4 Feb
- The DGA of Sisronbin.re · Added 25 Oct
- JDY Botnet: How IoT and SOHO Devices Are ExploitedLumen Black Lotus Labs · Added 10 Oct
