Malware Traffic Analysis Net
2025-12-07: Seven days of scans and probes and web traffic hitting my web server
1 month ago
2025-12-29: ClickFix activity leads to NetSupport RAT
1 month ago
2025-12-23: MacSync Stealer infection
1 month 1 week ago
2025-12-11: Kongtuke ClickFix activity using finger command
1 month 1 week ago
2025-12-22: StealC from files impersonating cracked versions of popular software
1 month 1 week ago
2025-12-17: Mirai activity (Linux traffic)
1 month 1 week ago
2025-12-11: SmartApeSG ClickFix activity using finger command
1 month 1 week ago
2025-11-19: XWorm infection from email attachment
2 months ago
2025-11-23: Ten days of scans and probes and web traffic hitting my web server
2 months ago
2025-11-10: Ten days of scans and probes and web traffic hitting my web server
2 months ago
2025-10-08: Infection from Kongtuke campaign's ClickFix page
3 months 3 weeks ago
2025-10-06: Japanese phishing emails
3 months 4 weeks ago
2025-10-02: Android malware
3 months 4 weeks ago
2025-10-01: Possible Rhadamanthys disguised as cracked version of popular software
3 months 4 weeks ago
2025-09-24: Lumma Stealer infection with follow-up malware (possible Ghostsocks/Go Backdoor)
4 months 1 week ago
2025-09-05: XLoader (Formbook) infection
4 months 2 weeks ago
2025-09-07: Seven days of scans and probes and web traffic hitting my web server
4 months 3 weeks ago
2025-09-03: Kongtuke CAPTCHA page to ClickFix script to Lumma Stealer
5 months ago
2025-08-20: SmartApeSG CAPTCHA page to ClickFix script to NetSupport RAT to StealCv2
5 months 2 weeks ago
Checked
13 hours 58 minutes ago
A malware traffic analysis blog
Malware Traffic Analysis Net feed