Malware
CryptoBandits
- First Reported
- Jun 19, 2026
- Latest Reported
- Jun 19, 2026
Reported Context (1)
- Dubbed CryptoBandits, the malware has been used in attacks since February 2026, deploying a portable Tor client on the infected systems and routing traffic through a local SOCKS5 proxy. CryptoBandits Malware Uses Tor for C2 and Acts as a Backdoor
MITRE ATT&CK (10)
Vendors (1)
Products (2)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.