Netskope Threat Labs

Vundo

ATP Sandbox Adv. HeuristicsAV

Vundo (a.k.a. VirtuMonde) is a notorious adware and trojan family that spread through drive by downloads and fake video codecs in the late 2000s. It injected advertisements, downloaded additional malware, and resisted removal with rootkit techniques, and it became a defining case study in the evolution of consumer facing adware.

First seen
April 2022
Last seen
October 2026
Alert Name
Gen:Variant.Vundo.10
Gen:Variant.Vundo.11
Gen:Variant.Vundo.4
Gen:Variant.Vundo.6
Gen:Variant.Vundo.8
Trojan.Vundo.8672
Trojan.Vundo.DTJ
Trojan.Vundo.FKM
Trojan.Vundo.FLK
Trojan.Vundo.Gen.4