Uptime Hamster: 36d 19h 47mDeploy: 3 Aug 2026 06:56Updated: 2026-07-21
PanelActoresCampanasMapaTTPs
Panel » Actores » Windigo
ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Logo del actor de amenaza Windigo

Windigo

1 incidentes 0 paises 1 sectores threat-actor RU Ultimo: 2026-05-25
Ver en IntelTracker → APTTrail →
The Windigo group has been operating since at least 2011, compromising thousands of Linux and Unix servers using the Ebury SSH backdoor to create a spam botnet. Despite law enforcement intervention against the creators, Windigo operators continued updating Ebury through 2019.

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
Webunknownattack.mitre.orgOSINT
Malware asociado
Win32/Glupteba.M
Tecnicas MITRE
T1083, T1082, T1059, T1059 - Command and Scripting Interpreter, T1518, T1090
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises objetivo (OSINT)

CanadaGermanySpainFranceUnited KingdomItalyJapanMexicoNetherlandsRussian Federation

Sectores atacados

Software (1)

Sectores objetivo (OSINT)

RetailInformation ServicesFinanceEducational ServicesArts & EntertainmentPublic AdministrationPublishing ServicesOther Information ServicesInsuranceE-Commerce