SYMBOLCOMMON_NAMEaka. SYNONYMS
win.xwo (Back to overview)

Xwo


In March 2019, AT&T Alien Labs identified a new malware family that is actively scanning for exposed web services and default passwords. Based on our findings we are calling it “Xwo” - taken from its primary module name. It is likely related to the previously reported malware families Xbash and MongoLock.

References
2019-04-02AT&TJaime Blasco, Chris Doman
@online{blasco:20190402:xwo:11817a2, author = {Jaime Blasco and Chris Doman}, title = {{Xwo - A Python-based bot scanner}}, date = {2019-04-02}, organization = {AT&T}, url = {https://www.alienvault.com/blogs/labs-research/xwo-a-python-based-bot-scanner}, language = {English}, urldate = {2020-01-06} } Xwo - A Python-based bot scanner
Xwo

There is no Yara-Signature yet.