Skip to content
MalwareWiki

Malware

Xwo

In March 2019, AT&T Alien Labs identified a new malware family that is actively scanning for exposed web services and default passwords.

Xwo is a Windows malware family.

Background

AT&T Alien Labs spotted this malware family in March 2019, observing it actively probe for exposed web services and default credentials. Researchers named it "Xwo" after its main module, and their analysis suggests it is probably connected to the earlier Xbash and MongoLock families.

Source: Malpedia (Fraunhofer FKIE).