MALWARE FAMILY

MyloBot

Internal ID: win.mylobot

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to PCrisk, MyloBot is a high-risk trojan-type virus that allows cyber criminals to control the infected machine. MyloBot can be considered as a botnet, since all infected computers are connected to a single network. Depending on cyber criminals' goals, infected machines might be misused or have additional infections applied.

Threat Analysis

MyloBot is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→http://blog.talosintelligence.com/2017/10/threat-round-up-1020-1017.html

→http://www.freebuf.com/column/153424.html

→https://blog.centurylink.com/mylobot-continues-global-infections/

→https://blogs.akamai.com/sitr/2021/01/detecting-mylobot-unseen-dga-based-malware-using-deep-learning.html

→https://github.com/360netlab/DGA/issues/36

→https://ti.qianxin.com/blog/articles/Analysis-of-Recent-Activities-of-the-Mylobot-Botnet-EN/

→https://www.bitsight.com/blog/mylobot-investigating-proxy-botnet

→https://www.deepinstinct.com/2018/06/20/meet-mylobot-a-new-highly-sophisticated-never-seen-before-botnet-thats-out-in-the-wild/

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.mylobot

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search MyloBot