Tool
Volume2
- First Reported
- Jul 16, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (1)
- The last delivery is Volume2, an open-source utility carrying a malicious protobuf.dll that decrypts and starts the real payload: a plugin dispatcher polling its C2 every 20 seconds. OkoBot Uses In-App Fake Recovery Prompts to Target Ledger and Trezor Users
Malware (7)
MITRE ATT&CK (15)
Vendors (3)
Products (6)
Tools (1)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.