“Their sites are also known to spread the Ardamax keylogger, another cheap, commercially available surveillance package.”
Ardamax
Samples
Recent samples
6 sandbox samples in the Derp library, newest 6 shown
6ddb80dca27c0ee072078226d92e43dc2b3c23ae45313f3bb948ca62afaa918c Analysed Oct 6, 2026Triage report
59d57c009c84e06bb30011625c0f3308a56d6a0f2b05b204f0b7ede9a34d09bf Analysed Oct 6, 2026Triage report
aca3f5f0f1350b316ee277bfe61a7c4f7d9d106950e7d51443387731ce44b30a Analysed Oct 6, 2026Triage report
d5f827477e64ec4fb16786c7e899e5ca56d4922013791af617dc95d08616a073 Analysed Oct 6, 2026Triage report
ba05d81e704856e15240da282446577bd5cbebce473b47974c64fbe6ca74ebb3 Analysed Oct 6, 2026Triage report
3d63ee013683b66c6a4c2097dfc9e37cfb40dc55e98ec7e2fdd0cc52615b178a Analysed Sep 30, 2026Triage report
Reported operators