Amadey Bot
Loader botnet for follow-on malware
Source Attribution
- Origin
- MITRE
- Source
- Malwarebytes research
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Malwarebytes research · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Amadey Bot first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Amadey is a loader botnet that distributes stealers and ransomware payloads via phishing campaigns. (attributes recorded from Malwarebytes research).
Definition
Amadey is a loader botnet that distributes stealers and ransomware payloads via phishing campaigns.
Overview
Amadey is a loader botnet that distributes stealers and ransomware payloads via phishing campaigns.
Behavior
- Distributed via phishing
- loads Stealc/RedLine
First Seen
2018-05
Target
Loader botnet for follow-on malware
Malware Intelligence
Family: Amadey Bot
Techniques: T1566, T1105
Targets: Loader botnet for follow-on malware
Behavior:
- Distributed via phishing
- loads Stealc/RedLine
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.