Description

The Fun/Troll functions in malware serve as a form of digital mischief, allowing attackers to toy with their victims by triggering a variety of benign but disruptive actions. These can range from opening and closing the CD-ROM drive, hiding the desktop icons, to disabling the start button or menu. More aggressive actions might include freezing the mouse cursor or turning the screen black. While these functions may seem playful or harmless at first glance, they often serve a dual purpose. First, they can distract the user or IT department, causing them to waste time on resolving seemingly trivial issues while the malware carries out its primary malicious activities undetected. Second, these actions can act as a smoke screen, generating a flurry of confusing system logs that make it more challenging to trace the malware's true activities. In this way, what appears to be 'trolling' can actually be a tactical maneuver within a broader attack strategy.

Categories Disruption, Alteration
Dangerousness Low

Existing Technique

Name Associated Feature(s) Has Snippet Matching Sample
Control CD/DVD Tray logoControl CD/DVD Tray Fun / Troll Functions 10

Associated with Releases

Version Origins Authors Languages Release Date
NetBus 1.70 logoNetBus 1.70 Sweden 🇸🇪 cf Delphi Nov, 1998
SubSeven 1.0 logoSubSeven 1.0 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 1999
SubSeven 1.1 logoSubSeven 1.1 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.2 logoSubSeven 1.2 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
Coma 1.0.9 logoComa 1.0.9 Unknown 🏴‍☠️ ThePr0 , UserUnFriendly , GoatAss , JohnFive Visual Basic 6 (VB6) Mar, 1999
SubSeven 1.3 logoSubSeven 1.3 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.4 logoSubSeven 1.4 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 1999
SubSeven 1.5 logoSubSeven 1.5 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 1999
SubSeven 1.6 logoSubSeven 1.6 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 1999
SubSeven 1.7 logoSubSeven 1.7 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi May, 1999
SubSeven 1.8 logoSubSeven 1.8 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi May, 1999
SubSeven 1.9 logoSubSeven 1.9 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jun, 1999
Back Orifice 2000 (BO2K) 1.0 logoBack Orifice 2000 (BO2K) 1.0 United States 🇺🇸 Cult of the Dead Cow (cDc) C++ Jul, 1999
Vampire 1.2 logoVampire 1.2 Unknown 🏴‍☠️ Ju1c3 Visual Basic 6 (VB6) Jul, 1999
SubSeven 1.9 Apocalypse logoSubSeven 1.9 Apocalypse Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Aug, 1999
SubSeven 2.0 logoSubSeven 2.0 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Sep, 1999
SchoolBus 2.0 logoSchoolBus 2.0 Turkey 🇹🇷 Serdar Kabaoglu Delphi Oct, 1999
SubSeven 2.1 logoSubSeven 2.1 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Nov, 1999
Hack a Tack 2000 logoHack a Tack 2000 Unknown 🏴‍☠️ The Bart33 , Da SuckA Delphi Feb, 2000
SubSeven 2.1.1 GOLD edition logoSubSeven 2.1.1 GOLD edition Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2000
SubSeven 2.1.2 M.U.I.E logoSubSeven 2.1.2 M.U.I.E Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Apr, 2000
Y3K rat 1.0 logoY3K rat 1.0 Greece 🇬🇷 firelarm , Chucky Delphi May, 2000
SubSeven 2.1.3 BONUS logoSubSeven 2.1.3 BONUS Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jun, 2000
SubSeven 2.1.4 DEFCON 8 logoSubSeven 2.1.4 DEFCON 8 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Jul, 2000
Y3K rat 1.5 logoY3K rat 1.5 Greece 🇬🇷 firelarm , Chucky Delphi Jan, 2001
SubSeven 2.2 logoSubSeven 2.2 Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Mar, 2001
Y3K rat 1.6 MS logoY3K rat 1.6 MS Greece 🇬🇷 firelarm , Chucky Delphi Jul, 2001
Optix Pro 1.0 logoOptix Pro 1.0 Unknown 🏴‍☠️ s13az3 Delphi Apr, 2002
Net-Devil 1.5 logoNet-Devil 1.5 Unknown 🏴‍☠️ Nilez Delphi Jul, 2002
Beast 1.7 logoBeast 1.7 Romania 🇷🇴 Tataye Delphi Oct, 2002
Beast 1.8 logoBeast 1.8 Romania 🇷🇴 Tataye Delphi Nov, 2002
MoSucker 3.0b logoMoSucker 3.0b Germany 🇩🇪 Superchachi Visual Basic 6 (VB6) Nov, 2002
Beast 1.90 logoBeast 1.90 Romania 🇷🇴 Tataye Delphi Dec, 2002
Turkojan 1.0 logoTurkojan 1.0 Turkey 🇹🇷 Fungus Delphi Jan, 2003
Beast 1.91 logoBeast 1.91 Romania 🇷🇴 Tataye Delphi Jan, 2003
Beast 1.92 logoBeast 1.92 Romania 🇷🇴 Tataye Delphi Feb, 2003
SubSeven 2.1.5 Legends logoSubSeven 2.1.5 Legends Romania 🇷🇴, Canada 🇨🇦 Mobman Delphi Feb, 2003
CIA 1.0 logoCIA 1.0 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Mar, 2003
Beast 2.00 logoBeast 2.00 Romania 🇷🇴 Tataye Delphi May, 2003
Beast 2.01 logoBeast 2.01 Romania 🇷🇴 Tataye Delphi Jun, 2003
LanFiltrator 1.1 Fix 1 logoLanFiltrator 1.1 Fix 1 Australia 🇦🇺 Read101 Delphi Aug, 2003
Optix Pro 1.32 logoOptix Pro 1.32 Unknown 🏴‍☠️ s13az3 , xMs Delphi Sep, 2003
CIA 1.2 logoCIA 1.2 England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 Alchemist Visual Basic 6 (VB6) Sep, 2003
Beast 2.05 logoBeast 2.05 Romania 🇷🇴 Tataye Delphi Sep, 2003
Beast 2.02 logoBeast 2.02 Romania 🇷🇴 Tataye Delphi Sep, 2003
ProRat 1.1 logoProRat 1.1 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
Hue 1.0 logoHue 1.0 Unknown 🏴‍☠️ B33T Visual Basic 6 (VB6) Jan, 2004
ProRat 1.2 logoProRat 1.2 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Jan, 2004
ProRat 1.3 logoProRat 1.3 Turkey 🇹🇷 HighLander , ATmaCA Borland C++ Feb, 2004
Nuclear RAT 1.0 Beta 5 logoNuclear RAT 1.0 Beta 5 Brazil 🇧🇷 Caesar2k Delphi Feb, 2004