Tag: botnet

This report examines an infrastructure used to control compromised edge devices transformed into Operational Relay Boxes for laun…

PRC-linked cyber actors have compromised thousands of Internet-connected devices to create a botnet for malicious activities. Int…

This analysis uncovers a significant infection chain targeting Windows and Linux systems through Oracle WebLogic vulnerabilities.…

A large, multi-tiered botnet called Raptor Train, likely operated by Chinese threat actors Flax Typhoon, has been discovered. Con…

This analysis uncovers the expansion of a significant botnet operation, dubbed Quad7 or 7777 botnet, characterized by its unique …

TrendMicro highlights the dangers of internet-facing routers and elaborates on Pawn Storm's exploitation of EdgeRouters, compleme…

Sekoia.io investigated the mysterious 7777 botnet (aka Quad7 botnet), which compromised TP-Link routers to relay password sprayin…

This report discusses the AndroxGh0st malware, a Python-scripted threat targeting Laravel web applications to steal sensitive dat…

An analysis of a newly discovered botnet named Zergeca, implemented in Go language, with capabilities for DDoS attacks, proxying,…

QIanxin describes the discovery and analysis of k4spreader, a new malware installer and spreader tool developed by the 8220 minin…

The report provides an in-depth analysis of the notorious Botnet 911 S5, revealing its origins, operations, and digital remnants.…

This report discusses a botnet that has been active since 2019, distributing various malware such as NiceRAT, Nitol, and NanoCore…

This report discusses a case where a CoinMiner threat actor's proxy server, used to access an infected botnet, became the target …

In late April 2024, Proofpoint observed high-volume email campaigns facilitated by the Phorpiex botnet, distributing millions of …

Juniper Threat Labs has observed attempts to exploit Ivanti Pulse Secure authentication bypass and remote code execution vulnerab…

In April 2024, FortiGuard Labs observed a new botnet exploiting a nearly decade-old D-Link vulnerability to take control of devic…