← All actors Recent activity

BOOKWORM

BOOKWORM

Indicators
11
Source reports
3
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02

Overview 11 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain11BOOKWORM-domain.txt

Principal sources 3 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 11 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 11 domain9 yrs ago

    researchcenter.paloaltonetworks.com/2015/11/bookworm-trojan-a-model-of-modu… · twitter.com/kienbigmummy/status/1557762252870385664 · virustotal.com/gui/file/87ec9b5cb7f8dbdf5ea89cade8ab71…

    bkmail.blogdns.com
    debain.servehttp.com
    linuxdns.sytes.net
    news.nhknews.hk
    sswmail.gotdns.com
    sswwmail.gotdns.com
    sysnc.sytes.net
    systeminfothai.gotdns.ch
    thailandbbs.ddns.net
    ubuntudns.sytes.net
    web12.nhknews.hk

Further reading 3