Threat actorTracked since 2026-06

Vo1d

Also known as:Mzmess operatorsLinkDoorMzmessPopa botnet

As of 2026-06-18, Vo1d is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Mzmess operators, LinkDoor, Mzmess, Popa botnet.

Tracked threats: 11 high
First seen: 2026-062026-06-18
Last seen: 2026-062026-06-18
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced

1 tracked threat(s) · Categories: MALWARE

Activity timeline

Vo1d appears in 1 tracked threat between 2026-06-18 and 2026-06-18.

Tracked threats

Popa Botnet — Android TV Box Residential-Proxy Malware (Vo1d/Mzmess Plugin) Linked to NetNut / Alarum TechnologiesHIGH2026-06-18