XWorm monitors the clipboard for cryptocurrency wallet addresses and replaces them with addresses controlled by the attacker.
While older XWorm versions had basic UDP floods, v3.1 includes:
XWorm v3.1 "Updated" is not just another malware release; it is a testament to the creativity of the cybercrime ecosystem. It is a multi-tool capable of stealing your life savings, turning your PC into a weapon for DDoS attacks, or selling your corporate VPN access to the highest bidder. xworm v31 updated
Threat Level: Critical
Attackers can remotely execute commands, capture screenshots, and log keystrokes. Suggest specific EDR (Endpoint Detection and Response) rules
Often delivered via phishing emails with malicious attachments (e.g., weaponized Excel files or PDFs).
Additional modules for data theft and control. often distributed through Telegram-based marketplaces.
Suggest specific EDR (Endpoint Detection and Response) rules to detect its behavior.
XWorm is a multi-functional RAT written in .NET that first gained notoriety in 2022. It is popular among threat actors for its versatility and relatively low cost on underground forums, often distributed through Telegram-based marketplaces.
