Vjw0rm (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 13:25:24 UTC
win.vjw0rm (Back to overview)
Vjw0rm
VJW0rm (aka Vengeance Justice Worm) is a publicly available, modular JavaScript RAT. Vjw0rm was first
released in November 2016 by its primary author, v_B01 (aka Sliemerez), within the prominent DevPoint Arabic-language malware development community. VJW0rm appears to be the JavaScript variant of a series of RATs with
identical functionality released by the author throughout late 2016. Other variants include a Visual Basic Script
(VBS) based worm titled vw0rm (Vengeance Worm), an AutoHotkey-based tool called vrw0rm (Vengeance Rise
Worm), and a PowerShell-based variant called vdw0rm (Vengeance Depth Worm).
References
2023-01-10 ⋅ SecurityScorecard ⋅ Vlad Pasca
How to Analyze JavaScript Malware – A Case Study of Vjw0rm
Vjw0rm
2022-10-13 ⋅ Spamhaus ⋅ Spamhaus Malware Labs
Spamhaus Botnet Threat Update Q3 2022
FluBot Arkei Stealer AsyncRAT Ave Maria BumbleBee Cobalt Strike DCRat Dridex Emotet Loki Password
Stealer (PWS) Nanocore RAT NetWire RC NjRAT QakBot RecordBreaker RedLine Stealer Remcos Socelars
Tofsee Vjw0rm
2022-08-18 ⋅ Proofpoint ⋅ Joe Wise, Proofpoint Threat Research Team, Selena Larson
Reservations Requested: TA558 Targets Hospitality and Travel
AsyncRAT Loda NjRAT Ozone RAT Revenge RAT Vjw0rm
2022-05-11 ⋅ HP ⋅ HP Wolf Security
Threat Insights Report Q1 - 2022
AsyncRAT Emotet Mekotio Vjw0rm
2021-12-13 ⋅ RiskIQ ⋅ Jordan Herman
RiskIQ: Connections between Nanocore, Netwire, and AsyncRAT and Vjw0rm dynamic DNS C2
infrastructure
AsyncRAT Nanocore RAT NetWire RC Vjw0rm
https://malpedia.caad.fkie.fraunhofer.de/details/win.vjw0rm
Page 1 of 2

2021-11-18 ⋅ Twitter (@tccontre18) ⋅ Br3akp0int
Tweet on how to decrypt 4 layers of encryption & obfuscation of vjw0rm
Vjw0rm
2021-11-04 ⋅ Deep instinct ⋅ Shaul Vilkomir-Preisman
Understanding the Windows JavaScript Threat Landscape
STRRAT Griffon BlackByte Houdini Vjw0rm FIN7
2021-10-01 ⋅ HP ⋅ HP Wolf Security
Threat Insights Report Q3 - 2021
STRRAT CloudEyE NetWire RC Remcos TrickBot Vjw0rm
2021-09-02 ⋅ LIFARS ⋅ Vlad Pasca
Vjw0rm Worm/RAT
Vjw0rm
2021-03-21 ⋅ abuse.ch ⋅ abuse.ch
Vjw0rm malware samples
Vjw0rm
2020-11-01 ⋅ AppRiver ⋅ Chris Lee
Vjw0rm Is Back With New Tactics
Vjw0rm
There is no Yara-Signature yet.
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.vjw0rm
https://malpedia.caad.fkie.fraunhofer.de/details/win.vjw0rm
Page 2 of 2