Description
Brontok is a mass mailing worm from 2005 that spread through email attachments and infected removable drives, primarily hitting Indonesian users. It kills security processes, modifies browser settings, and restarts the machine when certain tools run, and its armored variants kept resurfacing for years.
Stats
- First seen
- January 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Document-HTML.Worm.Brontok |
| Generic.Brontok.27686492 |
| MemScan:Win32.Worm.Brontok.AM |
| Win32.Brontok.1.Gen@mm |
| Win32.Brontok.A@mm |
| Win32.Brontok.AP@mm |
| Win32.Brontok.MK |
| Win32.Brontok.MO |
| Win32.Brontok.MS |
| Win32.Brontok.NB |