Malware
DarkGate
- First Reported
- Oct 17, 2024
- Latest Reported
- Oct 10, 2026
Reported Context (2)
- DarkGate,LokiBot, CYFIRMA Report: Persistent Espionage and Identity Attacks Target India’s Government and Defence Sector
- the above table, 91.222.173[.]140, hosted within the SOLLUTIUM EU Sp z.o.o. ASN, has been flagged as a DarkGate C2 server with two recent files--Notepad++.exe and upd_1602649.msix--actively communicating with the IP. Researchers Map Updated WarmCookie Infrastructure and Identify Possible DarkGate C2 Overlap
Malware (12)
Threat Actors (8)
Products (8)
Tools (4)
Industries (2)
Countries (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.