APT / THREAT GROUP

MyloBot

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to PCrisk, MyloBot is a high-risk trojan-type virus that allows cyber criminals to control the infected machine. MyloBot can be considered as a botnet, since all infected computers are connected to a single network. Depending on cyber criminals' goals, infected machines might be misused or have additional infections applied.

Threat Analysis

MyloBot is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://blog.talosintelligence.com/2017/10/threat-round-up-1020-1017.html

→http://www.freebuf.com/column/153424.html

→https://blog.centurylink.com/mylobot-continues-global-infections/

→https://blogs.akamai.com/sitr/2021/01/detecting-mylobot-unseen-dga-based-malware-using-deep-learning.html

→https://github.com/360netlab/DGA/issues/36

Quick Facts

TypeAPT / Threat Group

Aliases4

Also Known As

FakeDGAwin.mylobotWillExecMyloBot

External Intelligence

Malpedia: win.mylobot

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search MyloBot