RustDuck: Multi-Device DDoS Botnet
RustDuck hijacks home routers, IP cameras, Android boxes, and poorly secured servers to conduct DDoS attacks, demonstrating the expansion of botnet targets…
Tag: botnet
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security,…
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
The RustDuck botnet has been rewritten in Rust, targeting routers and servers to launch distributed denial-of-service attacks.
Russian State-Sponsored Threat Actors Exploit Ubiquiti Routers
Russian state-sponsored threat actors have been observed using compromised Ubiquiti Edge OS routers as part of a botnet to proxy malicious traffic.…
MooBot Botnet Targeting Ubiquiti Routers
MooBot is a botnet that compromised Ubiquiti Edge OS routers to proxy malicious traffic. It was associated with Russian state-sponsored threat actors…
Ubiquiti Edge OS Routers Targeted by MooBot
Ubiquiti Edge OS routers were compromised by Russian state-sponsored threat actors to form the MooBot botnet, which was disrupted in a law…
Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has released security updates to address multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, UniFi Talk, UniFi Access,…
HalluSquatting Attack Exploits AI Coding Assistants to Deliver Botnet Malware
Researchers from Tel Aviv University, Technion, and Intuit have identified a novel attack vector called HalluSquatting that exploits AI coding assistants' tendency…
CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
Nokia Deepfield Documents zhima Reverse Proxy Module
Nokia Deepfield Emergency Response Team documented the zhima reverse proxy module, which is used in proxy botnet operations and has been found…