QTBotnet: Botnet Management Platform
QTBotnet is a platform used by QTFY to command and control compromised devices, capable of launching DDoS attacks and executing commands.
Tag: DDoS
RondoDox DDoS Botnet Exploits Ray Vulnerability
RondoDox is a DDoS botnet threat actor group that incorporated CVE-2025-62593 into its arsenal two days before public disclosure, leveraging a proof-of-concept…
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have uncovered a previously undocumented Linux botnet family named Evooo1Bot, which is derived from the Mirai botnet source code and…
Evooo1Bot: A New Mirai-Based Linux Botnet
Evooo1Bot is a Linux botnet family derived from the Mirai source code, active since July 2026. It exploits known vulnerabilities to compromise…
Kimwolf v7 Android Botnet Uses HTTP/2 to Evade DDoS Detection
Cybersecurity researchers have uncovered a new version of the Kimwolf/AISURU Android and IoT botnet, tracked as Kimwolf v7, which introduces significant enhancements…
Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its…
Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
JackSkid IoT Botnet Disrupted in March 2026 Law Enforcement Operation
JackSkid was one of four IoT botnets targeted in coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026. Court…
Dysphoria IoT Botnet with Blockchain C2 and Victim Relays
Dysphoria is an IoT botnet tracked by CNCERT and XLab. It evolved after the JackSkid disruption to use ENS and SNS for…
Kimwolf Botnet: Evolution and Capabilities
Kimwolf is an Android and IoT botnet active since mid-2024, targeting Android TV boxes and Linux IoT devices. It conducts DDoS attacks…