Varenyky
- First seen
- 2019-05-01 00:00:00
- Family
- Malware family
- Profile updated
- 2026-07-07 15:22:53
Targeted industries: technology-and-telecommunications
Targeted regions: country_code:fr
Context
In May 2019, ESET researchers observed a spike in ESET telemetry data regarding malware targeting France. After further investigations, they identified malware that distributes various types of spam. One of them is leading to a survey that redirects to a dodgy smartphone promotion while the other is a sextortion campaign. The spam targets the users of Orange S.A., a French ISP.
Detection coverage
- 2 YARA rules
Detection rules
- CAPE_Varenyky (yara-rule)
- MALPEDIA_Win_Varenyky_Auto (yara-rule)
Reports & references
- krebsonsecurity.com — Nuclear Bot Author Arrested In Sextortion Case (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Varenyky (report)
- ESET — Varenyky Spambot Campaigns France (report)