VirusTotal Adds Scanning for Public IPv4 Space to Expose C2 Servers and Malware Infrastructure
VirusTotal now scans public IPv4 daily, recording ports, banners, and fingerprints to surface C2 infrastructure.
54
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenAug 21, 2026
- Last mentioned23d ago
Timeline
2 articles · newest firstTrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
Head Mare exploits TrueConf server flaws to install web shells and deliver PhantomCore and PhantomGraph backdoors at Russian organizations.
74
Appears with
- HelloBackdoormalware · 1
- Positive Technologiesorganization · 1
- Head Marethreat actor · 1
- JSC ViPNetvendor · 1
- Check Pointvendor · 1
- HelloInjectormalware · 1
- PhantomCoremalware · 1
- ViPNetproduct · 1
- Check Pointorganization · 1
- HelloNetthreat actor · 1
- NOX Stealermalware · 1
- TrueConf Clientproduct · 1
- TrueConfvendor · 1
- APT28threat actor · 1
- BOMBAY Stealermalware · 1
- HelloProxymalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.