Description
Ngioweb is a malware family that turns infected Windows and Linux hosts into proxy nodes for commercial abuse, with researchers documenting its use both as the NSOCKS proxy botnet and as a proxy network serving other botnets such as Ramnit. Its operators monetize victims' internet connections by renting them out to other cybercriminals.
Stats
- First seen
- November 2023
- Last seen
- September 2026
Alert name variants
| Alert Name |
|---|
| Linux.Backdoor.Ngioweb |
| Linux.Trojan.Ngioweb |
| Trojan.Linux.Ngioweb.10 |
| Trojan.Linux.Ngioweb.116 |
| Trojan.Linux.Ngioweb.16 |
| Trojan.Linux.Ngioweb.2 |
| Trojan.Linux.Ngioweb.21 |
| Trojan.Linux.Ngioweb.27 |
| Trojan.Linux.Ngioweb.30 |
| Trojan.Linux.Ngioweb.E |