Cisco Talos published IOCs ↗
- Evidence class
- provider reported
- Source family label
- Amadey
- Source confidence
- Not reported
- Observed
- 2025-07-15 13:58 UTC
- Retrieved
- 2026-10-08 06:16 UTC
Amadey
Malware galaxy based on Malpedia archive. | Amadey is a botnet that appeared around October 2018 and is being sold for about 500$ on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targ
Reference details
- Primary displayed family label
- Amadey
- Source context
2025/07/maas-operation-using-emmenhtal-and-amadey.json- First reported
- 2025-07-15 13:58 UTC
- Last reported
- 2025-07-15 13:58 UTC
- Catalog updated
- 2026-10-08 06:16 UTC
Source family labels
Tags
Published indicators
Network addresses are displayed in defanged form.
No file hashes or network indicators were published in this record.