Derp.ca
Malware family

CyberGate

Profile source: Mallory opens in a new tab

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Jul 15, 2026
Last activity
Jul 19, 2026
Feed role
C2
Host form
1 IP / 6 hostnames

Leading locations

  • US2
  • ES1
  • FR1
  • SG1

Leading providers

  • Wowrack.com2
  • Aryaka Networks, Inc.1
  • Bouygues Telecom SA1
  • XTRA TELECOM S.A.1

Infrastructure traits

  • Hosting 3
  • Residential Proxy 1

Samples

Recent associated samples

8db0cd1d0244de2a22f748c4d8fdac91f6850f1fef19bc7f2afe1d5cefb5b228
Observed Jul 19, 2026Triage
8f20020d5b0669c889435750b00452672cb17fc2a87225a5341040bc05afc008
Observed Jul 19, 2026Triage
9bddae1f50fbeeba8541ff1c724ba64a249f4afb71400cd31ccffa8540086348
Observed Jul 19, 2026Triage
ced90667d0c5bab5a5cd3bbd55634d8a308170a866ef16447e87ae13c6a6ee49
Observed Jul 19, 2026Triage
e77e98d44648b068a2036f4eb4ce0d528d0ae2172f3c375294fc56a6e219b771
Observed Jul 19, 2026Triage
f87d454dd49c3b0c8bd81219f17b67c51056bfb45b6e60dc6eb9d9d5cbfb2594
Observed Jul 19, 2026Triage
08ca87a41f33cc30e5f04a8c18f3ffce9af46d8c02e27ce8d0cc64dd941514ed
Observed Jul 15, 2026Triage

MITRE ATT&CK

CyberGate in ATT&CK

1 distinct techniques

Reporting

Research mentioning CyberGate

Oct 30
Malwarebytes Labs

Remote Access Trojan (RAT) | RAT Malware | RAT Trojans | Malwarebytes Labs

Others, such as CyberGate, DarkComet, Optix, Shark, and VorteX Rat have a smaller distribution and utilization.

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

adam:ONE opens in new tab Tria.ge opens in new tab IPinfo opens in new tab urlscan.io opens in new tab eCrime.ch opens in new tab Mallory opens in new tab