SuppoBox

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.suppobox

Threat Analysis

SuppoBox is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.avast.com/2013/06/18/your-facebook-connection-is-now-secured/

→https://media.blackhat.com/us-13/US-13-Geffner-End-To-End-Analysis-of-a-Domain-Generating-Algorithm-Malware-Family-WP.pdf

→https://paper.bobylive.com/Meeting_Papers/BlackHat/USA-2013/US-13-Geffner-End-To-End-Analysis-of-a-Domain-Generating-Algorithm-Malware-Family-WP.pdf

→https://www.justice.gov/opa/pr/two-romanian-cybercriminals-convicted-all-21-counts-relating-infecting-over-400000-victim

→https://www.symantec.com/connect/blogs/bayrob-three-suspects-extradited-face-charges-us

Quick Facts

TypeAPT / Threat Group

Aliases5

Also Known As

pizdNivdortwin.suppoboxSuppoBoxBayrob

External Intelligence

Malpedia: win.suppobox

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search SuppoBox