Jul 10, 2026
C2 Hosts: 1
Houdini
Also known as: Hworm, Jenxcus, Kognito, Njw0rm, WSHRAT, dinihou, dunihi
Houdini is a VBS-based RAT dating back to 2013. Past in the days, it used to be wrapped in an .exe but started being spamvertized or downloaded by other malware directly as .vbs in 2018. In 2019, WSHRAT appeared, a Javascript-based version of Houdini, recoded by the name of Kognito.
C2 Infrastructure
Hosting/VPS 100%
Last 7 days
| Date | C2 Hosts |
|---|---|
| Jul 10, 2026 | 1 |
Further Reading
blog.morphisec.com opens in a new tab
blog.morphisec.com
blogs.360.cn opens in a new tab
blogs.360.cn
about.fb.com opens in a new tab
about.fb.com
blog.morphisec.com opens in a new tab
blog.morphisec.com
blog.talosintelligence.com opens in a new tab
blog.talosintelligence.com
blogs.360.cn opens in a new tab
blogs.360.cn
cofense.com opens in a new tab
cofense.com
cybersecurity.att.com opens in a new tab
cybersecurity.att.com
github.com opens in a new tab
github.com
isc.sans.edu opens in a new tab
isc.sans.edu
lab52.io opens in a new tab
lab52.io
mp.weixin.qq.com opens in a new tab
mp.weixin.qq.com
myonlinesecurity.co.uk opens in a new tab
myonlinesecurity.co.uk
threatpost.com opens in a new tab
threatpost.com
threatresearch.ext.hp.com opens in a new tab
threatresearch.ext.hp.com
unit42.paloaltonetworks.com opens in a new tab
unit42.paloaltonetworks.com
binarydefense.com opens in a new tab
binarydefense.com
bleepingcomputer.com opens in a new tab
bleepingcomputer.com
cadosecurity.com opens in a new tab
cadosecurity.com
deepinstinct.com opens in a new tab
deepinstinct.com
fireeye.com opens in a new tab
fireeye.com
trellix.com opens in a new tab
trellix.com
vectra.ai opens in a new tab
vectra.ai
welivesecurity.com opens in a new tab
welivesecurity.com
youtube.com opens in a new tab
youtube.com
youtube.com opens in a new tab
youtube.com
yoroi.company opens in a new tab
yoroi.company
