botnet

Alert: XorBot Comes Back with Enhanced Tactics
I. Overview According to the monitoring by NSFOCUS, since the beginning of 2024, a new-type botnet family with a high level of anti-tracking awareness—XorBot—has been continuously updating its versions and introducing new ...

Over 300,000! GorillaBot: The New King of DDoS Attacks
Overview In September 2024, NSFOCUS Global Threat Hunting System monitored a new botnet family calling itself Gorilla Botnet entering an unusually active state. Between September 4 and September 27, it issued over ...

15-Year-Old Ebury Botnet Compromised 400,000 Linux Servers
Bad news: The operators behind the credential stealer and OpenSSH backdoor continue to evolve the malware's propagation tactics and targets ...
TheMoon Botnet Facilitates Faceless To Exploit EoL Devices
In a digital landscape fraught with threats, vigilance is paramount. The cybercriminals are exploiting End-of-Life devices to perpetrate their malicious activities. Recently, Black Lotus Labs, the formidable threat intelligence arm of Lumen ...
FritzFrog Botnet Strikes Back Exploiting Log4Shell Vulnerability
A new variant of the sophisticated botnet “FritzFrog” has emerged, leveraging the Log4Shell vulnerability for propagation. Despite more than two years passing since the Log4j flaw was discovered, attackers continue to exploit ...

‘Total Bollocks’ — No, Your Toothbrush isn’t DDoS’ing
PR FAIL: Were 3 million toothbrushes hacked into a botnet? Or does a Fortinet spokeschild have egg on his face? ...

NSFOCUS Reveals New Botnet Family RDDoS
1. Introduction of the New Botnet RDDoS In early November 2023, NSFOCUS’s Global Threat Hunting System detected that an unknown elf file was spreading widely, which aroused our vigilance. After further analysis, ...

NoaBot Pwns Hundreds of SSH Servers as Crypto Miners
‘hi’ — Mirai-based botnet exploits weak authentication to mine fake money ...

xorbot: A Stealthy Botnet Family That Defies Detection
I. Background of xorbot In November 2023, NSFOCUS Global Threat Hunting System detected that a type of elf file was being widely distributed and accompanied by a large amount of suspected encrypted outbound ...
Ddostf DDoS Botnet Malware Targets MySQL Servers
Beware of a new threat in the cyber realm: the ‘Ddostf’ malware botnet is on the prowl, specifically targeting MySQL servers. This malicious botnet enslaves MySQL servers for a sinister purpose – ...