PumaBot is a new Go-based botnet targeting embedded Linux IoT devices through SSH brute-force attacks. Unlike random scanning botnets, it retrieves specific target lists from C2 servers before attacking. After infection, it establishes persistence by disguising itself as legitimate Redis f...
PumaBot is a sophisticated Go-based Linux botnet targeting IoT devices, particularly surveillance cameras, through SSH brute force attacks. Unlike typical botnets, it uses a targeted approach, receiving specific IP lists from its C2 server. Once it compromises a system, it establishes pers...
A new Mirai botnet variant called Aquabot exploits a vulnerability in Mitel phones (CVE-2024-41710) and other IoT devices to create a DDoS attack network. First detected in November 2023, it targets multiple device architectures, implements new C2 communication features, and disguises itse...
A new variant of the AISURU botnet, called AIRASHI, exploits a zero-day vulnerability in Cambium Networks routers and other IoT devices to conduct massive DDoS attacks reaching 1-3 Tbps. The botnet, active since June 2024, exists in two variants: AIRASHI-DDoS for attacks and command execut...
Russian cybercrime group "Matrix" launches widespread DDoS campaign targeting IoT devices globally, primarily affecting China and Japan, with operations across multiple countries. The group exploits vulnerable devices and servers through weak credentials, deploying Mirai botnet variants an...
