MooBot
- First seen
- 2019-09-01 00:00:00
- Malware type
- botnet, ddos
- Family
- Malware family
- Last IoC activity
- 2026-07-22 01:26:46
- Profile updated
- 2026-07-07 14:22:04
Targeted industries: technology-and-telecommunications media-and-entertainment
Context
MooBot is a botnet malware known for targeting IoT devices to perform distributed denial-of-service (DDoS) attacks. It is considered a variant of the infamous Mirai botnet, exploiting vulnerabilities in network-connected devices to recruit them into its network.
Reports & references
- blog.netlab.360.com — Some Details Of The Ddos Attacks Targeting Ukraine And Russia In Recent Days (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Moobot (report)
- blog.netlab.360.com — Moobot 0Day Unixcctv Dvr En (report)
- otx.alienvault.com — 6075B645942D5Adf9Bb8949B (report)
- justice.gov — Justice Department Conducts Court Authorized Disruption Botnet Controlled Russian (report)
- blog.netlab.360.com — Ddos Botnet Moobot En (report)
- media.defense.gov — Csa Russian Actors Use Routers Facilitate Cyber Operations (report)
- Palo Alto Unit 42 — Moobot D Link Devices (report)
- github.com — Apt28%20The%20Long%20Hand%20Of%20Russian%20Interests (report)
- fortinet.com — Mirai Based Botnet Moobot Targets Hikvision Vulnerability (report)