ProtonBot
- First seen
- 2020-01-01 00:00:00
- Malware type
- botnet
- Family
- Malware family
- Related IoCs
- 1 (1 malicious)
- Last IoC activity
- 2026-09-12 23:29:27
- Profile updated
- 2026-07-07 14:44:14
Targeted industries: financial-services technology-and-telecommunications
Context
ProtonBot is a prominent malware family that acts as a botnet. It is known primarily for targeting financial institutions and technology companies, leveraging compromised systems for malicious activities.
Detection coverage
- 2 YARA rules
Detection rules
- MALPEDIA_Win_Protonbot_Auto (yara-rule)
- DITEKSHEN_MALWARE_Win_Protonbot (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Protonbot (report)
- fumik0.com — Overview Of Proton Bot Another Loader In The Wild (report)
- youtube.com — Watch (report)