Phorpiex Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
February 10, 2026
Last Seen
April 3, 2026

Related Threat Clusters

  • Phorpiex Botnet Revives Ransomware and Sextortion Operations

    The Phorpiex botnet, also known as Trik, is being leveraged by hackers to conduct extensive ransomware, sextortion, and crypto-clipping campaigns. This botnet, which has been operational since 2011, has evolved into a…

    2 articles · Updated April 3, 2026
  • Phorpiex Phishing Campaign Uses Weaponized Windows Shortcuts

    A phishing campaign leveraging the Phorpiex malware has been identified, utilizing weaponized Windows shortcut files to deliver Global Group ransomware. The campaign, which began in late 2024 and continues into 2026,…

    9 articles · Updated February 10, 2026

Recent Intelligence Reports

  • Hackers Use Phorpiex Botnet to Spread Ransomware, Sextortion, and Crypto — Cybersecuritynews · April 3, 2026
  • Phorpiex Botnet Fuels Ransomware, Sextortion, and Crypto — Gbhackers · April 3, 2026
  • Phorpiex malware delivers global group ransomware via phishing — Scworld · February 10, 2026
  • Phorpiex Phishing Delivers Low — Infosecurity-Magazine · February 10, 2026
  • Windows shortcut weaponized in Phorpiex — Csoonline · February 10, 2026
  • Attackers Weaponizing Windows Shortcut File to Deliver Global Group Ransomware — Cybersecuritynews · February 10, 2026

CVSS v3.1 Breakdown