botnet Archives - Securezoo

MCCrash botnet launches DDoS attacks against Minecraft servers

Cybersecurity Attacks, Malware / Frank Crast / December 21, 2022 / botnet, Cyberattack, DDoS, DEV-1028, IOT, MCCrash, Microsoft, Minecraft

Microsoft researchers have detected a cross-platform botnet designed to infect Windows, Linux, and IoT devices. The botnet dubbed “MCCrash” then launches distributed denial of service (DDoS) attacks against private Minecraft servers.

MCCrash botnet launches DDoS attacks against Minecraft servers Read More »

Mirai variant MooBot botnet targets multiple D-Link flaws

Cybersecurity Attacks, Malware, Network Security, Vulnerabilities & Exploits / Frank Crast / September 11, 2022 / botnet, CVE-2015-2051, CVE-2018-6530, CVE-2022-26258, CVE-2022-28958, Cybersecurity Threat Center, D-Link, Mirai, MooBot

Security researchers from Palo Alto Networks Unit 42 have discovered a Mirai botnet variant dubbed “MooBot” that targets multiple D-Link flaws and exposed networking devices running Linux.

Mirai variant MooBot botnet targets multiple D-Link flaws Read More »

Emotet botnet reemerges with new threat behaviors

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / May 4, 2022 / AppX, botnet, Emotet, malware, TA542, XLL

Researchers from Proofpoint have observed the reemergence of Emotet botnet that has exhibited new behaviors in using new attack techniques.

Emotet botnet reemerges with new threat behaviors Read More »

Threat actors exploit Spring4Shell to weaponize and execute Mirai botnet

Cybersecurity Attacks, Malware, Vulnerabilities & Exploits / Frank Crast / April 8, 2022 / botnet, CVE-2022-22963, CVE-2022-22965, Mirai, Spring, Spring Framework, Spring4Shell

Researchers from Trend Micro have spotted threat actors exploiting the Spring4Shell vulnerability CVE-2022-22965 to weaponize and execute Mirai botnet.

Threat actors exploit Spring4Shell to weaponize and execute Mirai botnet Read More »

Ttint IoT botnet exploits 2 zero-days to spread RAT

Cybersecurity Attacks, Internet of Things (IoT), Malware, Network Security / Frank Crast / October 5, 2020 / botnet, malware, Netlab, RAT, Trojan, Ttint

A new IoT botnet dubbed Ttint now targets two Tenda router 0-day vulnerabilities to spread a Remote Access Trojan (RAT) based on Mirai botnet source code.

Ttint IoT botnet exploits 2 zero-days to spread RAT Read More »

FritzFrog P2P botnet breaches SSH servers

Cybersecurity Attacks, Malware / Frank Crast / August 24, 2020 / botnet, FritzFrog, Golang, malware

Security researchers from Guardicore discovered a sophisticated peer-to-peer (P2P) botnet dubbed FritzFrog has been actively breaching SSH servers since January 2020.

FritzFrog P2P botnet breaches SSH servers Read More »

Security experts see sharp increase in the Emotet botnet activity

Cybersecurity Articles, Malware / Frank Crast / August 7, 2020 / botnet, Check Point, Emotet, malware, Trickbot

Security experts from Check Point Research have observed a sharp increase in Emotet botnet activity used to spread spam campaigns and steal banking credentials.

Security experts see sharp increase in the Emotet botnet activity Read More »

APT33 uses a dozen botnets in targeted malware campaign

Cybersecurity Attacks, Malware / Frank Crast / November 15, 2019 / APT33, botnet, hacking, malware, Stonedrill

Security researchers from Trend Micro have spotted a dozen obfuscated botnets being used in a highly targeted malware campaign.

APT33 uses a dozen botnets in targeted malware campaign Read More »

Top 3 AWS security configuration mistakes

Cloud Security, Cybersecurity Articles, Server Security, System Hardening / Frank Crast / September 21, 2019 / Amazon, AWS, botnet, Cloud, DevOps, GoldBrute, GoScanSSH, Palo Alto Networks, Port 22, Port 3389

Cloud security experts from Palo Alto Networks have warned about three critical misconfigurations that are most common in most organizations and have contributed to the majority of cloud attacks.

Top 3 AWS security configuration mistakes Read More »

Miori IoT botnet spreads through PHP framework RCE vulnerability

Internet of Things (IoT), Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / December 26, 2018 / 1Z1H9, APEP, botnet, CVE-2017-17215, Huawei, IOT, Miori, PHP, ThinkPHP, Vulnerabilities

Attackers are using a variant of the infamous Mirai IoT botnet dubbed “Miori” to exploit a Remote Code Execution (RCE) vulnerability in ThinkPHP, a free open-source PHP framework.

Miori IoT botnet spreads through PHP framework RCE vulnerability Read More »