PsiX
Aliases: PsiXBot
- First seen
- 2018-09-15 00:00:00
- Malware type
- botnet, keylogger, ransomware, trojan
- Family
- Malware family
- Profile updated
- 2026-07-07 13:45:07
Targeted industries: financial-services technology-and-telecommunications
Context
According to Matthew Mesa, this is a modular bot. The name stems from the string PsiXMainModule in binaries until mid of September 2018. In binaries, apart from BotModule and MainModule, references to the following Modules have be observed: BrowserModule BTCModule ComplexModule KeyLoggerModule OutlookModule ProcessModule RansomwareModule SkypeModule
Reports & references
- medium.com — Inside View Of Brazzzersff Infrastructure 89B9188Fd145 (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Psix (report)
- blog.fox-it.com — Psixbot The Evolution Of A Modular Net Bot (report)
- proofpoint.com — Psixbot Continues Evolve Updated Dns Infrastructure (report)
- twitter.com — 1169558035649433600 (report)
- proofpoint.com — Psixbot Now Using Google Dns Over Https And Possible New Sexploitation Module (report)
- twitter.com — 1035211747957923840 (report)
- blog.comodo.com — Versions Of Psixbot (report)