We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Win32/Bofra
Detected by Microsoft Defender Antivirus
Aliases: Win32.Bofra (CA) Bofra (F-secure) I-Worm.Bofra (Kaspersky) W32/Bofra (Panda) W32/Bofra (Sophos) WORM_BOFRA (Trend Micro) W32.Bofra (Symantec)
Summary
Windows Defender Antivirus detects and removes this threat.
Win32/Bofra is a mass-mailing worm that can infect computers running Microsoft Windows. The worm creates a Web server on the infected computer. It sends a copy of itself to any user who connects to the server and requests a URL containing a certain string. The worm also connects to an IRC server to receive commands from attackers. Win32/Bofra terminates immediately if the system time is after December 15, 2004, 02:28:57.
Follow us
