Cryxos

Malware type

trojan

Languages

javascript

Related IoCs

5137 (5030 malicious)

Last IoC activity

2026-11-06 04:27:10

Profile updated

2026-10-26 08:25:22

Context

Cryxos is an antivirus detection name, used mainly by the Bitdefender engine and F-Secure, for malicious JavaScript embedded in web pages. Most detections are fake security alerts that claim the browser or computer is locked or infected and urge the visitor to call a bogus support number, sometimes looping audio warnings or opening many tabs. The same label is also applied to unrelated scripts such as phishing forms and JavaScript droppers, so it does not identify a single malware family or operator.

External references

• f-secure
• watchguard
• trendmicro