Blacklisted malware family
Blacklisted is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-04, most recently 2026-08-22.
Corpus statistics
- Publicly analyzed samples: 2
- First seen: 2026-08-04
- Last seen: 2026-08-22
- Verdicts: malicious 2
- File types: html 1, zip 1
Extracted command-and-control infrastructure
- http://acc-6.audi.de - 1 sample
- http://dle-news.ru - 1 sample
- http://mediaservice.audi.com/media - 1 sample
- http://quantsa.ru/?de - 1 sample
- http://www.audi.de/bin/dpu-de/ - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/550x247_0045_S3_Sportback_final.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/550x247_0046_A3_Sportback_final.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/550x247_0047_S3_final.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/550x247_0048_A3_final.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/550x274_0000_A1.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/550x274_0001_A1_Sportback.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014/flyouts_2014/A3_Cabriolet_440x274.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014_new_render_images/550x274_0002_a3_limousine.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014_new_render_images/550x274_MIAMI_flyout.png - 1 sample
- http://www.audi.de/content/dam/ngw/product/model_navigation/my_2014_new_render_images/550x274_RIO_flyout.png - 1 sample
- http://www.audiclub-russia.ru/engine/opensearch.php - 1 sample
- http://www.audiclub-russia.ru/user/ozEFizbt/rss.xml - 1 sample
- https://staticsfs.host/js/EQHAwxADAgAUxAGSVlFL1FZe4jCL0hEFAQdK1gQFJhAyAgTdByDtISJTsEWA5DOzcRLi42KmcUO-IEPnkyHGphQXpQE-cxYm0yXTgVNEQzI8gRFlUUKYojUHRjYxQBOZoRQNMANuMFMvcXFAIDMGYBWPAFHCtAXUIQQBAwCWtFQHlBFJ9xTVYwO.js?tds=3&trl=0.50 - 1 sample
Recent Blacklisted samples
- 8d6a96e7ea7a536ca9d443f6c43bd43ec3dfd529180a945d6bbb7b912e192417 - malicious (2026-08-22)
- 13e58c3b5e45ff821184b68ec229eee463284b0b887cddf3b8bd955439a3a525.zip - malicious (2026-08-04)
Frequently asked about Blacklisted
- What is Blacklisted?
- Blacklisted is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-04, most recently 2026-08-22.
- How many Blacklisted samples have been analyzed?
- MalwareAnalyzer by Cyble holds 2 publicly analyzed samples attributed to Blacklisted, first seen 2026-08-04 and most recently 2026-08-22. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What file types does Blacklisted use?
- Blacklisted samples in this corpus are distributed as html (1), zip (1).
- Does Blacklisted use command-and-control infrastructure?
- Yes. 18 distinct command-and-control indicators have been extracted from Blacklisted samples, either from static configuration or from traffic captured during sandbox detonation. The full list is published on the family page.
- Is Blacklisted malicious?
- 2 of 2 analyzed Blacklisted samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends