#danabot — Public Fediverse posts

Die "Operation Endgame" war für immerhin 6 Monate nachhaltig: DanaBot ist mit neuer Variante für Windows-Systeme zurück.
https://maniabel.work/archiv/191
#MaaS #Malware #BankingTrojaner #Trojaner #DanaBot #infosec #infosecnews #BeDiS

DanaBot malware is back to infecting Windows after 6-month break
#DanaBot
https://www.bleepingcomputer.com/news/security/danabot-malware-is-back-to-infecting-windows-after-6-month-break/

Recently Disrupted DanaBot Leaked Valuable Data for 3 Years https://www.securityweek.com/recently-disrupted-danabot-leaked-valuable-data-for-3-years/ #Malware&Threats #DanaBot #botnet

Recently Disrupted DanaBot Leaked Valuable Data for 3 Years https://www.securityweek.com/recently-disrupted-danabot-leaked-valuable-data-for-3-years/ #Malware&Threats #DanaBot #botnet

DanaBleed: DanaBot C2 Server Memory Leak Bug
#DanaBot
https://www.zscaler.com/blogs/security-research/danableed-danabot-c2-server-memory-leak-bug

🚨 Researchers warn of a surge in #ClickFix scams impersonating #Booking.com. Fake CAPTCHAs trick users into running malware like XWorm and DanaBot.

Read: https://hackread.com/clickfix-email-scam-fake-booking-com-emails-malware/

#CyberSecurity #Malware #Phishing #XWorm #DanaBot #Scam

Operation Endgame 2: 15 Millionen E-Mail-Adressen und 43 Millionen Passwörter | Security https://www.heise.de/news/Operation-Endgame-2-15-Millionen-E-Mail-Adressen-und-43-Millionen-Passwoerter-10396199.html #HaveIBeenPwned #Malware #Ransomware #Hacking #CyberCrime #Bumblebee #Latrodectus #Qakbot #DanaBot #HijackLoader #Warmcookie #Trickbot #Prolock #Doppelpaymer #REvil #Conti #BlackBasta #Cactus #OperationEndgame2

Operation Endgame 2.0: 20 Haftbefehle, Hunderte Server außer Gefecht gesetzt | Security https://www.heise.de/news/Operation-Endgame-2-0-20-Haftbefehle-Hunderte-Server-ausser-Gefecht-gesetzt-10394215.html #OperationEndgame #OperationEndgame2 #Malware #Ranswomware #Hacking #CyberCrime #Bumblebee #Latrodectus #Qakbot #DanaBot #HijackLoader #Warmcookie #Trickbot #Prolock #Doppelpaymer #REvil #Conti #BlackBasta #Cactus

Operation Endgame Takes Down DanaBot Malware, Neutralizes 300 Servers https://hackread.com/operation-endgame-danabot-malware-neutralizes-servers/ #OperationEndgame #Cybersecurity #CyberCrime #Security #TrickBot #Malware #DanaBot #Europol #Botnet #Qakbot

U.S. Authorities Seize DanaBot Malware Operation, Indict 16 – Source: securityboulevard.com https://ciso2ciso.com/u-s-authorities-seize-danabot-malware-operation-indict-16-source-securityboulevard-com/ #SecurityBoulevard(Original) #OperationEndgameCybercrime #rssfeedpostgeneratorecho #CyberSecurityNews #SecurityBoulevard #Threats&Breaches #Identity&Access #NetworkSecurity #CloudSecurity #Cybersecurity #datasecurity #DataPrivacy #Spotlight #endpoint #FEATURED #DanaBot #Malware #botnet #Russia

Operation Endgame Takes Down DanaBot Malware, Neutralizes 300 Servers – Source:hackread.com https://ciso2ciso.com/operation-endgame-takes-down-danabot-malware-neutralizes-300-servers-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #OperationEndgame #cybersecurity #CyberCrime #Hackread #security #TrickBot #DanaBot #Europol #malware #botnet #Qakbot

⛔ #OperationEndgame: Police takes down DanaBot malware network; 300 servers neutralized, €21.2M in crypto seized and 16 charged/

Read: https://hackread.com/operation-endgame-danabot-malware-neutralizes-servers/

#CyberSecurity #CyberCrime #DanaBot #Malware #Europe

Inside DanaBot’s Infrastructure: In Support of Operation Endgame II
#DanaBot
https://blog.lumen.com/inside-danabots-infrastructure-in-support-of-operation-endgame-ii/

Happy Friday everyone!

With the news breaking that the #DanaBot was disrupted, it got me thinking: How do these pieces of malware function and how do they stay on the victim's machines? And when you think of what a botnet operator really needs is repeated access to the compromised machine which gets me thinking about persistence. So, I poked around my favorite resources, the MITRE ATT&CK Matrix, looked at as many bot malware they have, and looked at what they had in common from a perspective of persistence. Two of the most common techniques used were T1547.001 - Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder and T1053.005 - Scheduled Task/Job: Scheduled Task. So, if you are hunting for bots, you may want to start there! Enjoy the read and Happy Hunting!

DanaBot malware disrupted, threat actors named
https://intel471.com/blog/danabot-malware-disrupted-threat-actors-named

Intel 471 Cyborg Security, Now Part of Intel 471 #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday

🔥 Operation Endgame is BACK! This time targeting #BumbleBee, #Latrodectus, #DanaBot, #WarmCookie, #Qakbot and #Trickbot!

Once again this is a HUGE win, with a truly international effort! 💪

As with phase one of #OperationEndgame, Spamhaus are providing remediation support - those affected will be contacted in due course with steps to take.

For more information, read our write-up here:
👉 https://www.spamhaus.org/resource-hub/malware/botnets-disrupted-worldwide-operation-endgame-is-back/

DanaBot Botnet Disrupted, 16 Suspects Charged https://www.securityweek.com/danabot-botnet-disrupted-by-law-enforcement-16-suspects-charged/ #Malware&Threats #lawenforcement #Featured #takedown #DanaBot #malware #botnet

DanaBot Botnet Disrupted, 16 Suspects Charged https://www.securityweek.com/danabot-botnet-disrupted-by-law-enforcement-16-suspects-charged/ #Malware&Threats #lawenforcement #Featured #takedown #DanaBot #malware #botnet

🚨 A major cybercrime network just got knocked offline.

The U.S. DOJ has announced the takedown of DanaBot, a long-running malware platform used in:
💵 Banking fraud
🧑‍💻 Ransomware delivery
🎣 Credential harvesting

What makes this takedown notable:
🌍 It involved law enforcement from multiple countries
🧑‍⚖️ Indictments have been unsealed against five developers, not just operators
🔄 DanaBot has been active since 2016, constantly evolving through modular upgrades

Remember, persistent, well-coordinated threats don’t vanish on their own — and that real deterrence starts with attribution and action.

#CyberSecurity #DanaBot #DOJ #LawEnforcement #CyberCrime

https://www.databreachtoday.com/us-takes-down-danabot-malware-indicts-developers-a-28466

Oops: DanaBot Malware Devs Infected Their Own PCs https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/ #DefenseCriminalInvestigativeService #ArtemAleksandrovichKalinkin #U.S.DepartmentofJustice #Russia'sWaronUkraine #Ne'er-Do-WellNews #AleksandrStepanov #ALittleSunshine #LummaStealer #Flashpoint #proofpoint #microsoft #teamcyrmu #Intel471 #Maffiozi #DanaBot #JimmBee #Zscaler #google #Paypal #Lumen #DCIS #ESET #Onix #fbi

Oops: DanaBot Malware Devs Infected Their Own PCs

https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/

#DefenseCriminalInvestigativeService #ArtemAleksandrovichKalinkin #U.S.DepartmentofJustice #Russia'sWaronUkraine #Ne'er-Do-WellNews #AleksandrStepanov #ALittleSunshine #LummaStealer #Flashpoint #proofpoint #microsoft #teamcyrmu #Intel471 #Maffiozi #DanaBot #JimmBee #Zscaler #google #Paypal #Lumen #DCIS #ESET #Onix #fbi