A malicious copycat of the Virustotal website has emerged that aims to infect visitors with malware to build a botnet.
The site included JavaScript that installed a worm (Worm.MSIL.Arcdoor.ov) which collects victim machine information for a command and control server, according to Kaspersky Lab.
The botnet performs DDoS attacks including synflood, httpflood, udpflood and icmpflood, researcher Jorge Mieres wrote in a blog.
The real Virustotal website is a free malware detection service.
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
.png&w=100&c=1&s=0)
iTnews Executive Retreat - Security Leaders Edition
Personetics Executive Forum 2026 — Sydney
Personetics Executive Forum 2026 — Auckland
Can Testing Keep Up? Quality in the Age of Accelerating Delivery
.png&w=120&c=1&s=0){kind=logo}
HPE Networking Day Sydney
