Divergent
Aliases: Novter
- First seen
- 2019-06-01 00:00:00
- Malware type
- botnet, loader
- Family
- Malware family
- Profile updated
- 2026-07-07 14:58:01
Targeted industries: financial-services technology-and-telecommunications
Targeted regions: country_code:us country_code:ru country_code:cn
Context
Divergent, also known as Novter, is a malware family often utilized to establish botnets. It primarily targets financial services and technology sectors in multiple regions, leveraging its capabilities to load additional malicious payloads.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Divergent_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Divergent (report)
- cert-pa.it — Devergent Malware Fileless (report)
- Trend Micro — Tech Brief New Fileless Botnet Novter Distributed By Kovcoreg Malvertising Campaign (report)
- Cisco Talos — Divergent Analysis (report)
- Trend Micro — New Fileless Botnet Novter Distributed By Kovcoreg Malvertising Campaign (report)
- Microsoft — Bring Your Own Lolbin Multi Stage Fileless Nodersok Campaign Delivers Rare Node Js Based Malware (report)