STATUS: ACTIVE
# XWorm Official

> Independent defensive threat intelligence on XWorm, a .NET Windows Remote Access Trojan first observed in 2022 and active through 2026.

## Site identity
- Name: XWorm Official
- URL: https://xworm.shop
- Type: Defensive threat-intelligence reference resource
- Scope: XWorm RAT — versions, architecture, campaigns, C2, plugins, IOCs, MITRE ATT&CK, detection, incident response, removal
- Safety: No malware hosted. No binaries, builders, cracked software, source code, or operational instructions. All malicious infrastructure defanged.
- Latest verified version: 7.4
- Last verified: 2026-10-04
- Last observation: 2026-10-02

## Canonical overview
- /what-is-xworm — What Is XWorm? Complete Malware Analysis
- /xworm-versions — Complete XWorm Version History
- /xworm-architecture — Inside XWorm's Architecture
- /xworm-capabilities — XWorm Capability Matrix

## Version index
- /xworm-5-6 — XWorm 5.6
- /xworm-6 — XWorm 6.0
- /xworm-6-4 — XWorm 6.4
- /xworm-7-2 — XWorm 7.2
- /xworm-7-4 — XWorm 7.4 (latest verified)

## Technical analysis index
- /xworm-c2 — How XWorm Command-and-Control Works
- /xworm-plugins — XWorm Plugins Explained
- /xworm-campaigns — XWorm Campaigns in 2026
- /xworm-phishing — How XWorm Infects Computers
- /xworm-clickfix — XWorm and ClickFix
- /xworm-maas — XWorm Malware-as-a-Service
- /xworm-ransomware — Can XWorm Encrypt Files?
- /xworm-trojanized-builder — The Trojanized XWorm Builder Incident
- /xworm-xcoder — What Happened to XCoder?

## IOC dataset
- /xworm-iocs — Searchable, filterable, exportable IOC database (defanged)

## Defense index
- /xworm-mitre-attack — XWorm MITRE ATT&CK Mapping
- /xworm-detection — How to Detect XWorm
- /xworm-removal — How to Remove XWorm
- /xworm-incident-response — XWorm Incident Response Guide

## Research methodology & policy
- /sources — Sources & Research Methodology
- /about — Editorial Policy, Research Methodology, Source Policy, Corrections Policy
- /changelog — XWorm Intelligence Changelog
- /faq — XWorm FAQ
- /research — Research Library index

## Notes
- This file is provided for machine discovery. It does not guarantee AI ranking.
- All claims are sourced and confidence-labeled.
- Technique IDs are not invented; only public-research-supported techniques are mapped.
XWorm Full Tech Access — 0.10 BTC — Access Granted, Network Mapped
@echophant