malware family

Akataru

1 host convicted as an Akataru command-and-control server: 1 still listed, 0 archived. First seen 2026-09-09.

feed checked TLP:CLEAR
hosts 1 1 still listed
listings 3
networks 1
first seen 2026-09-09

About

A name with almost no public footprint: it appears only as a tag on community threat-intelligence submissions from September 2026, which filed its servers under the Mirai IoT-botnet lineage, and no published analysis of the malware itself could be found. What is listed here is the botnet's server-side infrastructure, not one of the devices it infects.

Ports

:801:80801:84431

Detection packs

Rules for this hub's 1 still-listed host, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Hosts

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.