Netskope Threat Labs

Nimda

ATP Sandbox Adv. HeuristicsAV

Nimda is a fast spreading worm from 2001 that propagated through email, network shares, and exploitation of web server vulnerabilities, making it one of the first worms designed to attack both clients and servers. It dropped backdoors on infected machines and re-infected cleaned systems so aggressively that many administrators rebuilt hosts and patched networks to stop the spread.

First seen
March 2022
Last seen
October 2026
Alert Name
DeepScan:Generic.Nimda.5680903D
DeepScan:Generic.Nimda.C8D6292F
Generic.Nimda.0BD60308
Generic.Nimda.0F818F51
Generic.Nimda.3265057B
Generic.Nimda.33B38E89
Generic.Nimda.BC13FD7E
Generic.Nimda.E06141B7
Generic.Nimda.EA951CF5
JS.Nimda.A