Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
Tag: JackSkid
JackSkid IoT Botnet Disrupted in March 2026 Law Enforcement Operation
JackSkid was one of four IoT botnets targeted in coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026. Court…
NICT: Japan’s National Institute of Information and Communications Technology
NICT independently documented the JackSkid-to-ENS/SNS shift in May 2026 and found code and strings shared with several other botnet families.
March 2026 Law Enforcement Disruption of JackSkid IoT Botnet
Coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026 targeted JackSkid and three other IoT botnets. Court documents attributed…
Nokia Deepfield: Network Analytics and DDoS Protection
Nokia Deepfield documented the JackSkid operator's shift to ENS-based C2 after the March 2026 disruption. It provides network analytics and DDoS protection.
Comcast: Telecommunications and Media Conglomerate
Comcast's threat lab documented the JackSkid operator's fallback to ENS-based C2 after the March 2026 law enforcement operation.