FBot

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: elf.fbot

Threat Analysis

FBot is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.malwaremustdie.org/2020/01/mmd-0065-2020-linuxmirai-fbot.html

→https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html

→https://blog.netlab.360.com/fbot-is-now-riding-the-traffic-and-transportation-smart-devices-en/

→https://securitynews.sonicwall.com/xmlpost/vigilante-malware-removes-cryptominers-from-the-infected-device/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

elf.fbotFBot

External Intelligence

Malpedia: elf.fbot

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search FBot