Skip to content

PurpleFox

Profile source: Mallory opens in a new tab

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Jul 31, 2026
Last activity
Aug 6, 2026
Feed role
C2 / Distribution
Host form
5 IP / 10 hostnames

Leading locations

  • HK7
  • CN5
  • US2
  • IE1

Leading providers

  • cognetcloud INC3
  • CTG Server Limited2
  • Hangzhou Alibaba Advertising Co.,Ltd.2
  • Amazon.com, Inc.1
  • China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch1
  • China Telecom Henan Zhengzhou Shujugang IDC network1

Infrastructure traits

  • Hosting 13

Samples

Recent associated samples

MITRE ATT&CK

PurpleFox in ATT&CK

12 distinct techniques

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.