Back Cybersecuritynews

Hackers Use Phorpiex Botnet to Spread Ransomware, Sextortion, and Crypto

Cybersecuritynews •Tushar Subhra Dutta • April 3, 2026

A botnet that has been running since 2011 is back in the spotlight — not because it is new, but because it keeps reinventing itself. Phorpiex, also known as Trik, has grown from a basic spam tool into a full-scale criminal platform capable of delivering ransomware, sending sextortion emails to millions of victims, and silently […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phorpiex Botnet Revives Ransomware and Sextortion Operations The Phorpiex botnet, also known as Trik, is being leveraged by hackers to conduct extensive ransomware, sextortion, and crypto-clipping campaigns. This botnet, which has been operational since 2011, has evolved into a versatile criminal platform capable of targeting millions of victims. The recent emergence of a new variant called Twizt incorporates a hybrid architecture, combining traditional command-and-control with peer-to-peer protocols, enhancing its operational capabilities. Attack vectors include sending massive volumes of sextortion emails and deploying ransomware attacks. The botnet's infrastructure allows for efficient distribution of malicious payloads, affecting a wide range of systems. Current reports indicate that the botnet remains active and continues to adapt its methods to evade detection. The ongoing threat poses significant risks to individuals and organizations alike, as the scale of its operations is substantial. 2 sources 65

Hackers Use Phorpiex Botnet to Spread Ransomware, Sextortion, and Crypto

The full story

Extracted Entities

Attack Types (2)

Malware (2)