Description
IPStorm is cross-platform malware written in Go that turns infected machines into proxy nodes, and researchers have connected its infrastructure to North Korean cyber operations. Its proxy network design lets its operators monetize or use victims' internet connections.
Stats
- First seen
- April 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Linux.Trojan.IPStorm |
| MacOS.Trojan.IPStorm |
| Trojan.IPStorm.A |
| Trojan.IPStorm.B |
| Trojan.IPStorm.C |
| Trojan.Linux.IPStorm.A |
| Trojan.Linux.IPStorm.B |
| Trojan.MAC.IPStorm.B |
| Win32.Trojan.IPStorm |