Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
Tag: Dysphoria
Dysphoria IoT Botnet with Blockchain C2 and Victim Relays
Dysphoria is an IoT botnet tracked by CNCERT and XLab. It evolved after the JackSkid disruption to use ENS and SNS for…
CNCERT: China’s National Computer Network Emergency Response Technical Team
CNCERT is China's national computer emergency response team. It jointly tracks the Dysphoria IoT botnet with XLab and published analysis on its…
XLab: Threat Intelligence Lab of Qi’anxin
XLab is the threat-intelligence lab of Chinese cybersecurity firm Qi'anxin. It published the July 25 analysis of Dysphoria's evolution, including ENS/SNS resolution…
Ethereum Name Service (ENS): Decentralized Naming System
ENS is a blockchain-based name service used by Dysphoria for C2 resolution. The botnet uses ENS domains like m3rnbvs5d[.]eth and burrberry[.]eth to…
Solana Name Service (SNS): Decentralized Naming on Solana
SNS is a blockchain-based name service on Solana used by Dysphoria for C2 resolution, with domains like 24carnforth2merseyside[.]sol supplying infrastructure records.