Ngioweb (ELF)
- First seen
- 2013-05-01 00:00:00
- Malware type
- downloader, backdoor
- Family
- Malware family
- Profile updated
- 2026-07-07 13:15:14
Targeted industries: financial-services government-and-public-sector energy-and-utilities
Context
Ngioweb is a modular malware primarily affecting Linux systems, commonly used to download additional payloads and provide backdoor access to compromised systems. It is associated with targeted attacks on key sectors such as finance and government.
Reports & references
- Trend Micro — Water Barghest (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Ngioweb (report)
- blog.netlab.360.com — An Analysis Of Linux Ngioweb Botnet En (report)
- blog.netlab.360.com — Linux Ngioweb V2 Going After Iot Devices En (report)
- Trend Micro — Water Barghest (report)
- Trend Micro — Router Roulette (report)
- Trend Micro — Water Barghest (report)
- twitter.com — 1324346324683206657 (report)
- levelblue.com — Ngioweb Remains Active 7 Years Later (report)
- blog.lumen.com — One Sock Fits All The Use And Abuse Of The Nsocks Botnet (report)