Ngioweb (Windows)
Aliases: Grobios
- Malware type
- backdoor, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 14:27:57
Targeted industries: government-and-public-sector financial-services technology-and-telecommunications
Context
Ngioweb, also known as Grobios, is a backdoor trojan that primarily targets Windows systems. It is known for enabling remote control capabilities on infected devices, often deployed against government and financial sectors.
Reports & references
- blog.lumen.com — One Sock Fits All The Use And Abuse Of The Nsocks Botnet (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Ngioweb (report)
- Mandiant — Deep Dive Into Rig Exploit Kit Delivering Grobios Trojan (report)
- research.checkpoint.com — Ramnits Network Proxy Servers (report)