Fireball
- First seen
- 2017-05-01 00:00:00
- Family
- Malware family
- Last IoC activity
- 2026-07-15 20:45:03
- Profile updated
- 2026-07-07 15:01:28
Context
Fireball is a type of adware that takes over browsers, turning them into zombies to generate ad revenue for the attacker. It can hijack and manipulate web traffic, track infected users, and even execute malicious code.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Fireball_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Fireball (report)
- blog.checkpoint.com — Fireball Chinese Malware 250 Million Infection (report)