News report

# New Latrodectus malware replaces IcedID in network breaches

BleepingComputer, April 4, 2024. Operator continuity from IcedID to Latrodectus: Proofpoint and Team Cymru believe the developers of IcedID created Latrodectus, based on shared infrastructure and operational overlaps..

**Source type:** News report

**Published:** April 4, 2024

**Research grade:** S2

**Used in entries:** 1

## Bibliographic record

**Publisher:** BleepingComputer

**Published:** April 4, 2024

**Source type:** News report

**Research grade:** Source grade S2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.bleepingcomputer.com/news/security/new-latrodectus-malware-replaces-icedid-in-network-breaches/](https://www.bleepingcomputer.com/news/security/new-latrodectus-malware-replaces-icedid-in-network-breaches/)

**What it supports:** Operator continuity from IcedID to Latrodectus: Proofpoint and Team Cymru believe the developers of IcedID created Latrodectus, based on shared infrastructure and operational overlaps.

**Dataset id:** src\_bleepingcomputer\_latrodectus\_replaces\_icedid

## Research notes

- By Bill Toulas.
- Published 2024-04-04, before the 29-30 May 2024 Operation Endgame action; it evidences the successor relationship, not a post-takedown first sighting.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[Latrodectus](https://takedownindex.org/takedowns/operation-endgame-wave-1)

Rebrand, Operation Endgame wave 1

Later outcome

[All sources](https://takedownindex.org/sources)