Skip to content
MalwareWiki

Malware

Latrodectus

aka BLACKWIDOW · IceNova · Latrodectus · Lotus

First discovered in October 2023, BLACKWIDOW is a backdoor written in C that communicates over HTTP using RC4 encrypted requests.

Latrodectus, also known as BLACKWIDOW, IceNova, Latrodectus, Lotus, is a Windows malware family.

Background

Initially identified in October 2023, BLACKWIDOW is a C-language backdoor whose HTTP traffic is encrypted with RC4. It can run discovery commands, gather details about the infected host, update itself, and download and run an EXE, DLL, or shellcode. Researchers attribute its development to LUNAR SPIDER, the group behind the IcedID (aka BokBot) malware.

Source: Malpedia (Fraunhofer FKIE).