Tag: nanocore

2 Attack Reports | 0 Vulnerabilities

Attack reports

Inside China's Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs

An analysis of Chinese hosting environments reveals over 18,000 active command-and-control (C2) servers distributed across 48 infrastructure providers. C2 infrastructure dominates malicious activity at 84%, followed by phishing at 13%. China Unicom hosts nearly half of all observed C2 servers, with…
malware
apt
xmrig
cobalt strike
china
asyncrat
cybercrime
mirai
nanocore
mgbot
infrastructure
supershell
command-and-control
mozi
vshell
rondodox
CVE-2025-8110
valley rat
2026-01-15
arl
cloud providers
isps
l3mon
Published: January 15, 2026
Linked vulnerabilities : CVE-2025-8110 (CVSS 8.7)
Downloadable IOCs: 12

Malware botnet installing NiceRAT

This report discusses a botnet that has been active since 2019, distributing various malware such as NiceRAT, Nitol, and NanoCore. The botnet is spread through disguised cracked programs, shared on domestic file-sharing sites and blogs, posing as genuine software activators or game server tools. On…
malware
botnet
2024-06-06
nitol
nanocore
nicerat
Published: June 6, 2024
Downloadable IOCs: 24
Click here to see more Attack Reports