InterServer malware family
InterServer is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-05, most recently 2026-08-22.
Corpus statistics
- Publicly analyzed samples: 2
- First seen: 2026-08-05
- Last seen: 2026-08-22
- Verdicts: malicious 2
- File types: html 1, script 1
Extracted command-and-control infrastructure
- https://aglcmb.com/one/login.php - 1 sample
Recent InterServer samples
- e0a6530f9f3186d7d38fa0b148fc976de464f79561981ac879e411a783743387 - malicious (2026-08-22)
- ff605bac8772c5b29bb4374daa1f2e6bf63252a9e755c834e7555e99163e97ed - malicious (2026-08-05)
Frequently asked about InterServer
- What is InterServer?
- InterServer is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-05, most recently 2026-08-22.
- How many InterServer samples have been analyzed?
- MalwareAnalyzer by Cyble holds 2 publicly analyzed samples attributed to InterServer, first seen 2026-08-05 and most recently 2026-08-22. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What file types does InterServer use?
- InterServer samples in this corpus are distributed as html (1), script (1).
- Does InterServer use command-and-control infrastructure?
- Yes. 1 distinct command-and-control indicator has been extracted from InterServer samples, either from static configuration or from traffic captured during sandbox detonation. The full list is published on the family page.
- Is InterServer malicious?
- 2 of 2 analyzed InterServer samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends