{"id":12686,"date":"2021-03-15T10:27:50","date_gmt":"2021-03-15T10:27:50","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=12686"},"modified":"2026-04-17T18:07:46","modified_gmt":"2026-04-17T18:07:46","slug":"freakout-analysis-report-1","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/freakout-analysis-report-1\/","title":{"rendered":"‘FreakOut’ Malware Analysis – Groups Behind FreakOut"},"content":{"rendered":"\n

Produced by: NSFOCUS Security Labs<\/strong><\/p>\n\n\n\n

In early January 2021, NSFOCUS Security Labs captured an unknown malicious program called “out.py” via its real-time data platform, which is usually spread with the domain name “gxbrowser.net”. NSFOCUS Security Labs conducted an in-depth research on the samples and payloads of the malware and compared the malware with NSFOCUS threat intelligence, concluding that the malware belonged to a new type of botnet family.<\/p>\n\n\n\n

In mid- and late January 2021, many companies also detected the malware. Since it was called out.py and associated with the attacker dubbed Freak, it was named FreakOut. The malware was spread exploiting three vulnerabilities:<\/p>\n\n\n\n