Netskope Threat Labs

Torii

ATP Sandbox Adv. HeuristicsAVNetskope IPS

Torii is an IoT botnet that researchers assessed was not just another Mirai variant, showing unusual sophistication in its design and stealth for a botnet of its era.

First seen
May 2022
Last seen
October 2026
Alert Name
Linux.Trojan.Torii
Trojan.Linux.Torii.BI
Trojan.Linux.Torii.BN
Trojan.Linux.Torii.BW
Trojan.Linux.Torii.D
Trojan.Linux.Torii.E
Trojan.Linux.Torii.P
Trojan.Linux.Torii.S