Trik botnet
ObscureIQ Threat Intelligence · Actor Profile
Trik botnetConfidence: High
Botnet / malware operator
Also known as: Phorpiex, Trik
Motivation: Financial
1Attributed Breaches Circulating
HighAttribution Confidence
Botnet / malware operatorActor Type
Overview
Operators of the Phorpiex (Trik) worm and spam botnet active since ~2010, used to deliver malware and run extortion spam. A June 2018 misconfigured C2 server exposed 43M+ email addresses used for malspam distribution.
Tactics, Targeting & TTPs
In June 2018 a misconfigured Trik C2 server exposed 43M+ email addresses used for malspam distribution (the Trik Spam Botnet breach in HIBP).
Source
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Related cases · reference
View breach pages linked to Trik botnet
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.