สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency

Report

Home > List all groups > List all tools > List all groups using tool Mydoom

Threat Group Cards: A Threat Actor Encyclopedia

Tool: Mydoom

Names	Mydoom Novarg Mimail
Category	Malware
Type	Worm, DDoS
Description	(Palo Alto) MyDoom is an infamous computer worm first noted in early 2004. This malware has been featured in top ten lists of the most destructive computer viruses, causing an estimated $38 billion in damage. Although now well past its heyday, MyDoom continues to be a presence in the cyber threat landscape. While not as prominent as other malware families, MyDoom has remained relatively consistent during the past few years, averaging approximately 1.1 percent of all emails we see with malware attachments. We continue to record tens of thousands of MyDoom samples every month. The vast majority of MyDoom emails come from IP addresses registered in China, with the United States running a distant second. These emails are sent to recipients across the world, mostly targeting high tech, wholesale, retail, healthcare, education, and manufacturing industries.
Information	<https://unit42.paloaltonetworks.com/mydoom-still-active-in-2019/>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.mydoom>
AlienVault OTX	<https://otx.alienvault.com/browse/pulses?q=tag:MyDoom>

Last change to this tool card: 24 April 2021

Download this tool card in JSON format

All groups using tool Mydoom

Changed	Name	Country	Observed
APT groups
	Lazarus Group, Hidden Cobra, Labyrinth Chollima		2007-Feb 2024

1 group listed (1 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Report incidents

+66 (0)2-123-1227

[email protected]