Virut

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.virut

Threat Analysis

Virut is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.malwarebytes.com/threat-analysis/2018/03/blast-from-the-past-stowaway-virut-delivered-with-chinese-ddos-bot/

→https://chrisdietri.ch/post/virut-resurrects/

→https://krebsonsecurity.com/2013/01/polish-takedown-targets-virut-botnet/

→https://securelist.com/review-of-the-virus-win32-virut-ce-malware-sample/36305/

→https://www.mandiant.com/resources/pe-file-infecting-malware-ot

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

Virutwin.virut

External Intelligence

Malpedia: win.virut

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Virut