BigViktor
- First seen
- 2020-02-01 00:00:00
- Malware type
- botnet, ddos
- Family
- Malware family
- Profile updated
- 2026-07-07 14:22:33
Targeted industries: technology-and-telecommunications
Context
A DDoS bot abusing CVE-2020-8515 to target DrayTek Vigor routers. It uses a wordlist-based DGA to generate its C&C domains.
Exploited vulnerabilities
- CVE-2020-8515 (vulnerability)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Bigviktor (report)
- blog.netlab.360.com — Bigviktor Dga Botnet (report)