Threat Actor
Keksec
- First Reported
- Jul 15, 2026
- Latest Reported
- Jul 15, 2026
Reported Context (2)
- Unit 42 said shared infrastructure with Kaitori v3.9 and AISURU tooling places the TuxBot operator within the Keksec ecosystem; the article describes Keksec as running multiple IoT botnet variants. Unit 42 Details TuxBot IoT Botnet’s LLM-Assisted Development and Capabilities
- Researchers link TuxBot to the Keksec ecosystem through shared dropper infrastructure with Kaitori and AISURU tooling; they assess TuxBot as a likely variant in its portfolio. TuxBot v3 IoT Botnet Shows Signs of LLM-Assisted Development
Malware (6)
People (3)
MITRE ATT&CK (21)
Tools (1)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.