HOMETHREATSelf.iocontrol
MALWARE FAMILY

elf.iocontrol

3
aliases
Last seen:Mar 17, 2026

Intelligence Profile

IOControl is a Linux backdoor which targets ARM-based IoT and OT systems, which a particular focus on Fuel and Industrial Control Systems.

Threat Analysis

elf.iocontrol is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://claroty.com/team82/research/inside-a-new-ot-iot-cyber-weapon-iocontrol
→https://web-assets.claroty.com/resource-downloads/team82_iocontrol.pdf
→https://www.armis.com/blog/iocontrol-malware-whats-new-whats-not/
→https://www.bleepingcomputer.com/news/security/new-iocontrol-malware-used-in-critical-infrastructure-attacks/

Quick Facts

TypeMalware Family
Aliases3

Also Known As

QueueCatOrpraCabelf.iocontrol

External Intelligence

Malpedia: elf.iocontrol

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search elf.iocontrol