GeoServer GeoTools: Previously Exploited Library
GeoServer GeoTools is a Java library used by GeoServer. It was affected by CVE-2024-36401, a critical RCE vulnerability that was actively exploited…
Tag: botnet
TeamPCP Linked to Redis Attacks Dating Back to 2020 and Later Supply Chain Campaign
A new analysis by Oligo Security has uncovered that the threat actor known as TeamPCP has been active in the cybercrime scene…
Poison Claude Service Exposes Risks of Discounted AI Access, Okta Warns
Cybersecurity researchers at Okta have uncovered a network of underground services selling discounted access to Anthropic's large language models (LLMs), including Opus…
Cheap Android TV Boxes Hijacked as Ad-Fraud Proxies: Fuyao Operation Exposed
Cybersecurity firm Bitsight has uncovered a large-scale operation dubbed 'Fuyao' involving cheap Android TV boxes that secretly impersonate smartphones to commit ad…
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its…
Kimwolf Botnet: Evolution and Capabilities
Kimwolf is an Android and IoT botnet active since mid-2024, targeting Android TV boxes and Linux IoT devices. It conducts DDoS attacks…
OpenDental Database Accessed in Dental Clinic Botnet Attack
The threat actor accessed an OpenDental database on eight computers in a dental clinic as part of the botnet operation.
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
A solo Russian-speaking threat actor known as "bandcampro" has been observed using Google's open-source Gemini CLI AI to control a botnet of…
NadMesh Botnet Targets Exposed AI Services for Cloud Credentials and Kubernetes Tokens
A new Go-based botnet named NadMesh has been discovered actively hunting exposed AI services to steal cloud credentials and Kubernetes tokens. First…
NadMesh: Autonomous Scanning and Exploitation Platform
NadMesh combines scanning, exploitation, and credential harvesting into a single autonomous platform, targeting services like Redis, Docker, Kubernetes, and AI applications. It…