Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
Tag: SNS
Dysphoria IoT Botnet with Blockchain C2 and Victim Relays
Dysphoria is an IoT botnet tracked by CNCERT and XLab. It evolved after the JackSkid disruption to use ENS and SNS for…
NICT: Japan’s National Institute of Information and Communications Technology
NICT independently documented the JackSkid-to-ENS/SNS shift in May 2026 and found code and strings shared with several other botnet families.
Solana Name Service (SNS): Decentralized Naming on Solana
SNS is a blockchain-based name service on Solana used by Dysphoria for C2 resolution, with domains like 24carnforth2merseyside[.]sol supplying infrastructure records.