scanbox (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 19:34:38 UTC js.scanbox (Back to overview) scanbox Actor(s): Leviathan There is no description at this point. References 2024-09-04 ⋅ Natto Thoughts ⋅ Natto Team Reconnaissance Scanning Tools Used by Chinese Threat Actors and Those Available in Open Source scanbox Ladon Yasso 2022-08-30 ⋅ Proofpoint ⋅ Michael Raggi, PWC UK, Sveva Vittoria Scenarelli Rising Tide: Chasing the Currents of Espionage in the South China Sea scanbox Meterpreter APT40 2021-02-25 ⋅ Proofpoint ⋅ Michael Raggi, Proofpoint Threat Research Team TA413 Leverages New FriarFox Browser Extension to Target the Gmail Accounts of Global Tibetan Organizations scanbox Sepulcher Lucky Cat 2020-01-01 ⋅ Secureworks ⋅ SecureWorks BRONZE MOHAWK AIRBREAK scanbox BLACKCOFFEE CHINACHOPPER Cobalt Strike Derusbi homefry murkytop SeDll APT40 2019-09-02 ⋅ Volexity ⋅ Andrew Case, Matthew Meltzer, Steven Adair Digital Crackdown: Large-Scale Surveillance and Exploitation of Uyghurs scanbox POISON CARP https://malpedia.caad.fkie.fraunhofer.de/details/js.scanbox Page 1 of 2 2019-03-14 ⋅ Trustwave ⋅ Simon Kenin Attacker Tracking Users Seeking Pakistani Passport scanbox 2015-02-27 ⋅ InfoSec Institute ⋅ Ryan Mazerik ScanBox Framework scanbox 2014-08-28 ⋅ AT&T ⋅ Jaime Blasco Scanbox: A Reconnaissance Framework Used with Watering Hole Attacks scanbox There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/js.scanbox https://malpedia.caad.fkie.fraunhofer.de/details/js.scanbox Page 2 of 2