Bagle
- First seen
- 2004-01-18 00:00:00
- Malware type
- worm
- Family
- Malware family
- Profile updated
- 2026-07-07 14:47:58
Context
Bagle is a mass-mailing email worm that spreads via email attachments. It opens a backdoor on infected systems to allow remote access and propagation, making it distinct for its rapid spreading and network disruption.
Detection coverage
- 2 YARA rules
Detection rules
- DITEKSHEN_MALWARE_Win_Bagle (yara-rule)
- MALPEDIA_Win_Bagle_Auto (yara-rule)
Related threat objects
- Bagle (infrastructure)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Bagle (report)
- archive.f-secure.com — Carrera Erdelyi Vb2004 (report)