Advertisement
Amadey & StealC Malware C2 Infrastructure Disrupted
Microsoft and global allies dismantle the shared C2 infrastructure of Amadey botnet and StealC info-stealer malware, disrupting ongoing cybercrime operations.
AryStinger Botnet: Thousands of D-Link Routers Compromised as Proxies
The AryStinger botnet has compromised over 4,000 D-Link routers, converting them into malicious proxies using automated exploits for end-of-life hardware.
C0XMO Botnet Targets DD-WRT Router Firmware — Analysis and Mitigation
C0XMO, a Gafgyt-based botnet, exploits DD-WRT router vulnerabilities to launch DDoS attacks and eliminate rival malware on infected IoT devices.
Gafgyt and Mirai Variants Target IoT Devices via CVE-2017-17215
Analysis of Gafgyt and Mirai botnet activity targeting IoT devices through RCE vulnerabilities such as CVE-2017-17215 and CVE-2014-2320.
Infolink Anti-DDoS Provider Linked to Brazilian ISP Botnet Attacks
An investigation reveals Brazilian anti-DDoS firm Infolink facilitated massive DDoS attacks against regional ISPs, highlighting critical provider trust risks.
Chinese State-Backed Actors Industrialize Botnets for Covert Ops
Chinese state-backed groups are adopting industrialized botnets, utilizing compromised devices for low-cost, low-risk, and deniable cyber operations.
SystemBC C2 Analysis: 1,570 Victims of The Gentlemen Ransomware
Analysis of a SystemBC C2 server linked to The Gentlemen ransomware reveals over 1,570 victims and the use of SOCKS5 tunnels for persistent access.
Compromised DVRs: Identifying and Mitigating IoT Botnet Threats
Explore how Digital Video Recorders (DVRs) are compromised and incorporated into IoT botnets. Learn methods for identifying compromised devices and effective mitigation
Chaos Malware Variant Targets Cloud Infrastructure via SOCKS Proxy
A new variant of Chaos malware targets misconfigured cloud deployments, leveraging SOCKS proxy capabilities to expand botnet infrastructure beyond edge devices.
Silnikau Sentenced: BitPaymer Ransomware Botnet Operator Receives 2 Years
Russian national Maksim Silnikau sentenced for managing a botnet used in BitPaymer ransomware attacks targeting 72 U.S. companies and demanding $100 million.
Global Law Enforcement Action Disrupts Major IoT DDoS Botnets
Authorities from the US, Germany, and Canada dismantled C2 infrastructure for the Aisuru, KimWolf, JackSkid, and Mossad botnets used in global DDoS attacks.
SocksEscort Proxy Botnet Disrupted: Law Enforcement Seizes 369,000 IPs
International authorities dismantle the SocksEscort proxy botnet, which hijacked 369,000 residential routers across 163 countries for criminal activities.