Netskope Threat Labs

IRCBot

ATP Sandbox Adv. HeuristicsAV

IRCBot is a backdoor and worm that uses Internet Relay Chat (IRC) for command and control communication and self-propagates across network shares.

First seen
May 2022
Last seen
October 2026
IrcBotIrcbot
Alert Name
Backdoor.Ircbot.AAQ
Backdoor.IRCBot.ABRC
Backdoor.IRCBot.ABSZ
Backdoor.IRCBot.ABWN
Backdoor.IRCBot.ACEX
Backdoor.IRCBot.ACJJ
Backdoor.IRCBot.ADBD
Backdoor.IRCBot.ADBK
Backdoor.IRCBot.ADBL
Backdoor.IRCBot.ADCD