Netskope Threat Labs

Zeroaccess

ATP Sandbox Adv. HeuristicsNetskope IPS

Zeroaccess is a kernel-mode rootkit that adds victim machines to the ZeroAccess botnet, typically for monetary gain through fraud and click monetization.

First seen
April 2022
Last seen
October 2026

2 techniques across 1 tactics.

TA0005 Stealth

Alert Name
Binary.Trojan.ZeroAccess
Text.Trojan.ZeroAccess
Win32.Backdoor.ZeroAccess
Win32.Trojan.ZeroAccess
Win64.Trojan.ZeroAccess