- Category
- Tracked, unattributed · A vendor’s working cluster, not yet attributed.
- Origin
- Unknown
- Sources
- 4 sources carry it
- Identifier
- GINC-APT-0548 · keksec
What it is
The threat group behind EnemyBot, Keksec, is well-resourced and has the ability to update and add new capabilities to its arsenal of malware on a daily basis (see below for more detail on Keksec)
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- FreakOut, Kek Security, Necro
Tools
The tools and malware families the sources tie to it.
- EnemyBot
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de