Andromeda Bot
Loader botnet
Source Attribution
- Origin
- MITRE
- Source
- Microsoft takedown 2017
- Verified
- 2026-08-26T16:11:50.351Z
- Confidence
- high
Source: Microsoft takedown 2017 · Verified: 2026-08-26T16:11:50.351Z · Confidence: high
Security Timeline
- discovered Andromeda Bot first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Andromeda is a botnet kit used for stockpilers, loader and spam functions; disrupted in 2017. (attributes recorded from Microsoft takedown 2017).
Definition
Andromeda is a botnet kit used for stockpilers, loader and spam functions; disrupted in 2017.
Overview
Andromeda is a botnet kit used for stockpilers, loader and spam functions; disrupted in 2017.
Behavior
- Sold as malware kit
- botnet swarm
First Seen
2011-10
Target
Loader botnet
Malware Intelligence
Family: Andromeda Bot
Techniques: T1105, T1059
Targets: Loader botnet
Behavior:
- Sold as malware kit
- botnet swarm
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.