A malicious copycat of the Virustotal website has emerged that aims to infect visitors with malware to build a botnet.
The site included JavaScript that installed a worm (Worm.MSIL.Arcdoor.ov) which collects victim machine information for a command and control server, according to Kaspersky Lab.
The botnet performs DDoS attacks including synflood, httpflood, udpflood and icmpflood, researcher Jorge Mieres wrote in a blog.
The real Virustotal website is a free malware detection service.
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
.png&w=100&c=1&s=0)
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
.png&h=140&w=231&c=1&s=0)
.png&h=140&w=231&c=1&s=0)
