Netskope Threat Labs

VirtuMonde

ATP Sandbox Adv. HeuristicsAV

VirtuMonde is adware that displays advertisements behind the active browser window and tracks user browsing behavior on infected systems. It arrives through bundled installers and drive by downloads, and hidden advertising windows generate revenue while degrading performance and privacy. The family has circulated for decades under several names, and detections usually indicate bundled software that deserves removal.

First seen
January 2022
Last seen
October 2026
Virtumonde
Alert Name
Binary.Trojan.VirtuMonde
Dropped:Adware.Virtumonde.GFQ
Win32.Trojan.Virtumonde
Win32.Trojan.VirtuMonde