Loading threat actor…
Resgod is a Mirai-based botnet tracked as part of the broader ecosystem of Mirai-derived malware operations. It is identified alongside other Mirai botnets such as Aisuru, Tiny Mantis, Murdoc_Botnet, and Lzrd. As a Mirai-family botnet, it is associated with the compromise of insecure internet-connected devices, especially IoT systems, through the well-established Mirai tradecraft of scanning for exposed devices and abusing weak or default credentials. Mirai-derived botnets are commonly used in criminal for-hire operations and are primarily associated with distributed denial-of-service activity. Publicly available information in this context does not provide high-confidence attribution of Resgod to a specific country, victim geography, or distinct operator beyond its classification as a Mirai-using botnet.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.