#botnet — Public Fediverse posts

Flock is botnet heaven

#flock #botnet

Flock is botnet heaven

#flock #botnet

Flock is botnet heaven

#flock #botnet

Flock is botnet heaven

#flock #botnet

Flock is botnet heaven

#flock #botnet

Dysphoria Botnet Campaign Targeting IoT Devices for DDoS Attacks

Pulse ID: 6a7f750c25e71ea88a305576
Pulse Link: https://otx.alienvault.com/pulse/6a7f750c25e71ea88a305576
Pulse Author: cryptocti
Created: 2026-08-14 20:05:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DDoS #DoS #InfoSec #IoT #OTX #OpenThreatExchange #bot #botnet #cryptocti

Dysphoria Botnet Campaign Targeting IoT Devices for DDoS Attacks

Pulse ID: 6a7f750c25e71ea88a305576
Pulse Link: https://otx.alienvault.com/pulse/6a7f750c25e71ea88a305576
Pulse Author: cryptocti
Created: 2026-08-14 20:05:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DDoS #DoS #InfoSec #IoT #OTX #OpenThreatExchange #bot #botnet #cryptocti

Dysphoria Botnet Campaign Targeting IoT Devices for DDoS Attacks

Pulse ID: 6a7f750c25e71ea88a305576
Pulse Link: https://otx.alienvault.com/pulse/6a7f750c25e71ea88a305576
Pulse Author: cryptocti
Created: 2026-08-14 20:05:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DDoS #DoS #InfoSec #IoT #OTX #OpenThreatExchange #bot #botnet #cryptocti

Dysphoria Botnet Campaign Targeting IoT Devices for DDoS Attacks

Pulse ID: 6a7f750c25e71ea88a305576
Pulse Link: https://otx.alienvault.com/pulse/6a7f750c25e71ea88a305576
Pulse Author: cryptocti
Created: 2026-08-14 20:05:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DDoS #DoS #InfoSec #IoT #OTX #OpenThreatExchange #bot #botnet #cryptocti

Dysphoria Botnet Campaign Targeting IoT Devices for DDoS Attacks

Pulse ID: 6a7f750c25e71ea88a305576
Pulse Link: https://otx.alienvault.com/pulse/6a7f750c25e71ea88a305576
Pulse Author: cryptocti
Created: 2026-08-14 20:05:32

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DDoS #DoS #InfoSec #IoT #OTX #OpenThreatExchange #bot #botnet #cryptocti

Dysphoria botnet has compromised 296,000 IoT devices, facilitating DDoS attacks and proxy operations. Ensuring device security through updates and strong passwords is crucial to prevent exploitation.

#CyberSecurity #IoT #DDoS #Botnet #NetworkSecurity #Dysphoria

https://thedailytechfeed.com/dysphoria-botnet-exploits-iot-devices-for-ddos-and-proxy-attacks/

Multi-Functional Linux Botnet "Evooo1Bot"

A previously undocumented Linux botnet named Evooo1Bot has been discovered, actively targeting Internet-facing devices since July 2026. Built upon Mirai's DDoS engine, it extends functionality with encrypted C2 communications, SSH brute-force scanning, SOCKS relay capabilities, credential sniffing, and an integrated exploit arsenal. The malware employs multi-layer string encryption using AES-256-CTR, ChaCha20, and XOR-based key derivation. It exploits numerous vulnerabilities across edge devices, routers, and enterprise applications. The reverse SOCKS relay module transforms compromised devices into persistent proxies, enabling attackers to conceal their origin and pivot into internal networks. The botnet features 28 remote commands organized into modules for persistence, self-update, file transfer, interactive shell, sniffing, proxy relay, SSH scanning, DDoS attacks, and CVE exploitation. Multiple persistence mechanisms ensure continued operation across systemd, SysV init, cron, and shell profiles.

Pulse ID: 6a7e2be6ba37cc87ae552659
Pulse Link: https://otx.alienvault.com/pulse/6a7e2be6ba37cc87ae552659
Pulse Author: AlienVault
Created: 2026-08-13 20:41:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChaCha20 #CyberSecurity #DDoS #DoS #ELF #Edge #Encryption #InfoSec #Linux #Malware #Mirai #OTX #OpenThreatExchange #Proxy #RAT #RCE #SMS #SSH #bot #botnet #AlienVault

Multi-Functional Linux Botnet "Evooo1Bot"

A previously undocumented Linux botnet named Evooo1Bot has been discovered, actively targeting Internet-facing devices since July 2026. Built upon Mirai's DDoS engine, it extends functionality with encrypted C2 communications, SSH brute-force scanning, SOCKS relay capabilities, credential sniffing, and an integrated exploit arsenal. The malware employs multi-layer string encryption using AES-256-CTR, ChaCha20, and XOR-based key derivation. It exploits numerous vulnerabilities across edge devices, routers, and enterprise applications. The reverse SOCKS relay module transforms compromised devices into persistent proxies, enabling attackers to conceal their origin and pivot into internal networks. The botnet features 28 remote commands organized into modules for persistence, self-update, file transfer, interactive shell, sniffing, proxy relay, SSH scanning, DDoS attacks, and CVE exploitation. Multiple persistence mechanisms ensure continued operation across systemd, SysV init, cron, and shell profiles.

Pulse ID: 6a7e2be6ba37cc87ae552659
Pulse Link: https://otx.alienvault.com/pulse/6a7e2be6ba37cc87ae552659
Pulse Author: AlienVault
Created: 2026-08-13 20:41:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChaCha20 #CyberSecurity #DDoS #DoS #ELF #Edge #Encryption #InfoSec #Linux #Malware #Mirai #OTX #OpenThreatExchange #Proxy #RAT #RCE #SMS #SSH #bot #botnet #AlienVault

Multi-Functional Linux Botnet "Evooo1Bot"

A previously undocumented Linux botnet named Evooo1Bot has been discovered, actively targeting Internet-facing devices since July 2026. Built upon Mirai's DDoS engine, it extends functionality with encrypted C2 communications, SSH brute-force scanning, SOCKS relay capabilities, credential sniffing, and an integrated exploit arsenal. The malware employs multi-layer string encryption using AES-256-CTR, ChaCha20, and XOR-based key derivation. It exploits numerous vulnerabilities across edge devices, routers, and enterprise applications. The reverse SOCKS relay module transforms compromised devices into persistent proxies, enabling attackers to conceal their origin and pivot into internal networks. The botnet features 28 remote commands organized into modules for persistence, self-update, file transfer, interactive shell, sniffing, proxy relay, SSH scanning, DDoS attacks, and CVE exploitation. Multiple persistence mechanisms ensure continued operation across systemd, SysV init, cron, and shell profiles.

Pulse ID: 6a7e2be6ba37cc87ae552659
Pulse Link: https://otx.alienvault.com/pulse/6a7e2be6ba37cc87ae552659
Pulse Author: AlienVault
Created: 2026-08-13 20:41:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChaCha20 #CyberSecurity #DDoS #DoS #ELF #Edge #Encryption #InfoSec #Linux #Malware #Mirai #OTX #OpenThreatExchange #Proxy #RAT #RCE #SMS #SSH #bot #botnet #AlienVault

Multi-Functional Linux Botnet "Evooo1Bot"

A previously undocumented Linux botnet named Evooo1Bot has been discovered, actively targeting Internet-facing devices since July 2026. Built upon Mirai's DDoS engine, it extends functionality with encrypted C2 communications, SSH brute-force scanning, SOCKS relay capabilities, credential sniffing, and an integrated exploit arsenal. The malware employs multi-layer string encryption using AES-256-CTR, ChaCha20, and XOR-based key derivation. It exploits numerous vulnerabilities across edge devices, routers, and enterprise applications. The reverse SOCKS relay module transforms compromised devices into persistent proxies, enabling attackers to conceal their origin and pivot into internal networks. The botnet features 28 remote commands organized into modules for persistence, self-update, file transfer, interactive shell, sniffing, proxy relay, SSH scanning, DDoS attacks, and CVE exploitation. Multiple persistence mechanisms ensure continued operation across systemd, SysV init, cron, and shell profiles.

Pulse ID: 6a7e2be6ba37cc87ae552659
Pulse Link: https://otx.alienvault.com/pulse/6a7e2be6ba37cc87ae552659
Pulse Author: AlienVault
Created: 2026-08-13 20:41:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChaCha20 #CyberSecurity #DDoS #DoS #ELF #Edge #Encryption #InfoSec #Linux #Malware #Mirai #OTX #OpenThreatExchange #Proxy #RAT #RCE #SMS #SSH #bot #botnet #AlienVault

Multi-Functional Linux Botnet "Evooo1Bot"

A previously undocumented Linux botnet named Evooo1Bot has been discovered, actively targeting Internet-facing devices since July 2026. Built upon Mirai's DDoS engine, it extends functionality with encrypted C2 communications, SSH brute-force scanning, SOCKS relay capabilities, credential sniffing, and an integrated exploit arsenal. The malware employs multi-layer string encryption using AES-256-CTR, ChaCha20, and XOR-based key derivation. It exploits numerous vulnerabilities across edge devices, routers, and enterprise applications. The reverse SOCKS relay module transforms compromised devices into persistent proxies, enabling attackers to conceal their origin and pivot into internal networks. The botnet features 28 remote commands organized into modules for persistence, self-update, file transfer, interactive shell, sniffing, proxy relay, SSH scanning, DDoS attacks, and CVE exploitation. Multiple persistence mechanisms ensure continued operation across systemd, SysV init, cron, and shell profiles.

Pulse ID: 6a7e2be6ba37cc87ae552659
Pulse Link: https://otx.alienvault.com/pulse/6a7e2be6ba37cc87ae552659
Pulse Author: AlienVault
Created: 2026-08-13 20:41:10

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#ChaCha20 #CyberSecurity #DDoS #DoS #ELF #Edge #Encryption #InfoSec #Linux #Malware #Mirai #OTX #OpenThreatExchange #Proxy #RAT #RCE #SMS #SSH #bot #botnet #AlienVault

Aeternum botnet employs Polygon blockchain smart contracts for a decentralized C2 infrastructure, complicating traditional takedown methods. Organizations should enhance endpoint detection and monitor blockchain-related network traffic to counter this advanced threat.

#Cybersecurity #Aeternum #Botnet #Blockchain #Polygon #Malware

https://thedailytechfeed.com/aeternum-botnet-leverages-polygon-blockchain-for-resilient-c2-infrastructure/

Aeternum Botnet Uses Polygon Smart Contracts for Takedown-Resistant Malware C2

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/aeternum-blockchain-c2-analysis/

Pulse ID: 6a7eca0c254771760ee44515
Pulse Link: https://otx.alienvault.com/pulse/6a7eca0c254771760ee44515
Pulse Author: CyberHunter_NL
Created: 2026-08-14 07:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlockChain #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Aeternum Botnet Uses Polygon Smart Contracts for Takedown-Resistant Malware C2

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/aeternum-blockchain-c2-analysis/

Pulse ID: 6a7eca0c254771760ee44515
Pulse Link: https://otx.alienvault.com/pulse/6a7eca0c254771760ee44515
Pulse Author: CyberHunter_NL
Created: 2026-08-14 07:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlockChain #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Aeternum Botnet Uses Polygon Smart Contracts for Takedown-Resistant Malware C2

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/aeternum-blockchain-c2-analysis/

Pulse ID: 6a7eca0c254771760ee44515
Pulse Link: https://otx.alienvault.com/pulse/6a7eca0c254771760ee44515
Pulse Author: CyberHunter_NL
Created: 2026-08-14 07:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlockChain #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Aeternum Botnet Uses Polygon Smart Contracts for Takedown-Resistant Malware C2

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/aeternum-blockchain-c2-analysis/

Pulse ID: 6a7eca0c254771760ee44515
Pulse Link: https://otx.alienvault.com/pulse/6a7eca0c254771760ee44515
Pulse Author: CyberHunter_NL
Created: 2026-08-14 07:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlockChain #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Aeternum Botnet Uses Polygon Smart Contracts for Takedown-Resistant Malware C2

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/aeternum-blockchain-c2-analysis/

Pulse ID: 6a7eca0c254771760ee44515
Pulse Link: https://otx.alienvault.com/pulse/6a7eca0c254771760ee44515
Pulse Author: CyberHunter_NL
Created: 2026-08-14 07:55:56

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BlockChain #CyberSecurity #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

New.

Fortinet: Multi-Functional Linux Botnet “Evooo1Bot” https://www.fortinet.com/blog/threat-research/multi-functional-linux-botnet-evooo1bot @fortinet #infosec #threatresearch #botnet #malware

New.

Fortinet: Multi-Functional Linux Botnet “Evooo1Bot” https://www.fortinet.com/blog/threat-research/multi-functional-linux-botnet-evooo1bot @fortinet #infosec #threatresearch #botnet #malware

New.

Fortinet: Multi-Functional Linux Botnet “Evooo1Bot” https://www.fortinet.com/blog/threat-research/multi-functional-linux-botnet-evooo1bot @fortinet #infosec #threatresearch #botnet #malware

New.

Fortinet: Multi-Functional Linux Botnet “Evooo1Bot” https://www.fortinet.com/blog/threat-research/multi-functional-linux-botnet-evooo1bot @fortinet #infosec #threatresearch #botnet #malware

New.

Fortinet: Multi-Functional Linux Botnet “Evooo1Bot” https://www.fortinet.com/blog/threat-research/multi-functional-linux-botnet-evooo1bot @fortinet #infosec #threatresearch #botnet #malware

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7da2b72179e3a4cb0c1d31
Pulse Link: https://otx.alienvault.com/pulse/6a7da2b72179e3a4cb0c1d31
Pulse Author: CyberHunter_NL
Created: 2026-08-13 10:55:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Browser #Chrome #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

📢 Rapport Cloudflare sur les menaces DDoS au premier semestre 2026 : les attaques atteignant les 1 Tbit/s...

1) Le club du Tbit/s s'est agrandi. Cloudflare a atténué un total de 935 attaques DDoS sur la couche réseau dépassant les 1 Tbit/s au cours du premier semestre 2026 et a constaté une augmentation de 519 % du nombre de ces attaques entre le premier et le deuxième trimestre.

🔗 https://blog.cloudflare.com/fr-fr/ddos-threat-report-2026-h1/
💬 discussion : https://infosec.pub/post/50861729
#Botnet #DDoS #Cyberveille

"Smart" cars are just rolling, unpatched IoT botnets. The OEM drops OTA updates after year 3, but the rustbucket keeps driving for 15 years and more. Millions of them.
Does anyone actually know how this works?

#ConnectedCar #Security #IoT #InfoSec #Botnet #Automotive

"Smart" cars are just rolling, unpatched IoT botnets. The OEM drops OTA updates after year 3, but the rustbucket keeps driving for 15 years and more. Millions of them.
Does anyone actually know how this works?

#ConnectedCar #Security #IoT #InfoSec #Botnet #Automotive

"Smart" cars are just rolling, unpatched IoT botnets. The OEM drops OTA updates after year 3, but the rustbucket keeps driving for 15 years and more. Millions of them.
Does anyone actually know how this works?

#ConnectedCar #Security #IoT #InfoSec #Botnet #Automotive

"Smart" cars are just rolling, unpatched IoT botnets. The OEM drops OTA updates after year 3, but the rustbucket keeps driving for 15 years and more. Millions of them.
Does anyone actually know how this works?

#ConnectedCar #Security #IoT #InfoSec #Botnet #Automotive

StealC C2 domains dropping OverlordRAT, using CloudFlare and Microsoft look-a-like domains 👁️
🌐 cloud-flare-authenticator .link
🌐 cloud-flare-authenticator .click
🌐 update-microsoft-data .services
📡 89.34.90.45:443

OverlordRAT #botnet C2 server ⤵️
🌐 download-windows-update .live
📡 151.243.113.94:5173

Both hosted at AS207043 DEDIK-IO in Germany🇩🇪

📄 Malware sample:
https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/

🦊 IOCs on ThreatFox:
https://threatfox.abuse.ch/browse/malware/win.stealc/
https://threatfox.abuse.ch/browse/tag/OverlordRAT/

StealC C2 domains dropping OverlordRAT, using CloudFlare and Microsoft look-a-like domains 👁️
🌐 cloud-flare-authenticator .link
🌐 cloud-flare-authenticator .click
🌐 update-microsoft-data .services
📡 89.34.90.45:443

OverlordRAT #botnet C2 server ⤵️
🌐 download-windows-update .live
📡 151.243.113.94:5173

Both hosted at AS207043 DEDIK-IO in Germany🇩🇪

📄 Malware sample:
https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/

🦊 IOCs on ThreatFox:
https://threatfox.abuse.ch/browse/malware/win.stealc/
https://threatfox.abuse.ch/browse/tag/OverlordRAT/

StealC C2 domains dropping OverlordRAT, using CloudFlare and Microsoft look-a-like domains 👁️
🌐 cloud-flare-authenticator .link
🌐 cloud-flare-authenticator .click
🌐 update-microsoft-data .services
📡 89.34.90.45:443

OverlordRAT #botnet C2 server ⤵️
🌐 download-windows-update .live
📡 151.243.113.94:5173

Both hosted at AS207043 DEDIK-IO in Germany🇩🇪

📄 Malware sample:
https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/

🦊 IOCs on ThreatFox:
https://threatfox.abuse.ch/browse/malware/win.stealc/
https://threatfox.abuse.ch/browse/tag/OverlordRAT/

StealC C2 domains dropping OverlordRAT, using CloudFlare and Microsoft look-a-like domains 👁️
🌐 cloud-flare-authenticator .link
🌐 cloud-flare-authenticator .click
🌐 update-microsoft-data .services
📡 89.34.90.45:443

OverlordRAT #botnet C2 server ⤵️
🌐 download-windows-update .live
📡 151.243.113.94:5173

Both hosted at AS207043 DEDIK-IO in Germany🇩🇪

📄 Malware sample:
https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/

🦊 IOCs on ThreatFox:
https://threatfox.abuse.ch/browse/malware/win.stealc/
https://threatfox.abuse.ch/browse/tag/OverlordRAT/

StealC C2 domains dropping OverlordRAT, using CloudFlare and Microsoft look-a-like domains 👁️
🌐 cloud-flare-authenticator .link
🌐 cloud-flare-authenticator .click
🌐 update-microsoft-data .services
📡 89.34.90.45:443

OverlordRAT #botnet C2 server ⤵️
🌐 download-windows-update .live
📡 151.243.113.94:5173

Both hosted at AS207043 DEDIK-IO in Germany🇩🇪

📄 Malware sample:
https://bazaar.abuse.ch/sample/5c61c977440dd7e870c1a63037558dd3fc2c41c8fd9d6ab67acff1c7d35abe01/

🦊 IOCs on ThreatFox:
https://threatfox.abuse.ch/browse/malware/win.stealc/
https://threatfox.abuse.ch/browse/tag/OverlordRAT/

An Evolution of the Botnet

Pulse ID: 6a7bf8a320deffc5bdc1c33a
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8a320deffc5bdc1c33a
Pulse Author: Tr1sa111
Created: 2026-08-12 04:37:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8a320deffc5bdc1c33a
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8a320deffc5bdc1c33a
Pulse Author: Tr1sa111
Created: 2026-08-12 04:37:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8a320deffc5bdc1c33a
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8a320deffc5bdc1c33a
Pulse Author: Tr1sa111
Created: 2026-08-12 04:37:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8a320deffc5bdc1c33a
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8a320deffc5bdc1c33a
Pulse Author: Tr1sa111
Created: 2026-08-12 04:37:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8a320deffc5bdc1c33a
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8a320deffc5bdc1c33a
Pulse Author: Tr1sa111
Created: 2026-08-12 04:37:55

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8f57f942af8b9b49faa
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8f57f942af8b9b49faa
Pulse Author: Tr1sa111
Created: 2026-08-12 04:39:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8f57f942af8b9b49faa
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8f57f942af8b9b49faa
Pulse Author: Tr1sa111
Created: 2026-08-12 04:39:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8f57f942af8b9b49faa
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8f57f942af8b9b49faa
Pulse Author: Tr1sa111
Created: 2026-08-12 04:39:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8f57f942af8b9b49faa
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8f57f942af8b9b49faa
Pulse Author: Tr1sa111
Created: 2026-08-12 04:39:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

An Evolution of the Botnet

Pulse ID: 6a7bf8f57f942af8b9b49faa
Pulse Link: https://otx.alienvault.com/pulse/6a7bf8f57f942af8b9b49faa
Pulse Author: Tr1sa111
Created: 2026-08-12 04:39:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

📰 TuxBot v3: New IoT Botnet Framework Developed with LLM Assistance

Unit 42 details TuxBot v3, a new modular IoT botnet framework. Developed with LLM assistance, it features Telnet brute-forcing, DDoS capabilities, and C2 fallbacks via DGA & Pastebin. Shows evolution of AI in malware creation. #TuxBot #IoT #Botnet #M...

🔗 https://cyber.netsecops.io/articles/tuxbot-v3-iot-botnet-framework-uses-llm-assisted-development/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

📰 Aeternum Botnet Uses Polygon Blockchain for Resilient C2

Aeternum C++ botnet loader uses Polygon blockchain for decentralized C2, issuing commands via smart contracts. This resilient architecture complicates takedowns. #Aeternum #Botnet #Blockchain #C2 #Malware #Polygon

🔗 https://cyber.netsecops.io/articles/aeternum-botnet-leverages-polygon-blockchain-for-c2/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

Kimwolf v7 botnet now uses HTTP/2 and ENS to execute DDoS attacks that mimic legitimate traffic, complicating detection. Cybersecurity measures must evolve to address these advanced tactics.

#Cybersecurity #Botnet #DDoS #Kimwolf #HTTP2 #ENS

https://thedailytechfeed.com/kimwolf-v7-botnet-enhances-ddos-attacks-with-http-2-and-ens-integration/

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL

Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing

Indicators extracted from public reporting. Source: https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/

Pulse ID: 6a7b8c7ac9f862e53382eab9
Pulse Link: https://otx.alienvault.com/pulse/6a7b8c7ac9f862e53382eab9
Pulse Author: CyberHunter_NL
Created: 2026-08-11 20:56:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Android #CyberSecurity #DDoS #DoS #HTTP #HTTPS #InfoSec #Malware #OTX #OpenThreatExchange #RCE #bot #botnet #CyberHunter_NL