zhima: Reverse Proxy Module Used in Car Head Unit Malware
zhima is a reverse proxy module documented by Nokia Deepfield Emergency Response Team. It is selectively delivered via IPTV apps and now…
Tag: Nokia Deepfield
Android Car Head Unit Malware Spreads via Built-In Updaters for Ad Fraud and Proxy Botnet
Cybersecurity researchers have uncovered a new malware family specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which…
Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
Google Disrupts NetNut Residential Proxy Network with 2 Million Home Devices
Google's Threat Intelligence Group (GTIG), in collaboration with the FBI, Lumen, and other partners, has significantly disrupted NetNut, a massive residential proxy…
Nokia Deepfield Documents zhima Reverse Proxy Module
Nokia Deepfield Emergency Response Team documented the zhima reverse proxy module, which is used in proxy botnet operations and has been found…