Articles tagged with Botnet

VPNFilter Can Also Infect ASUS, D-Link, Huawei, Ubiquiti, UPVEL, and ZTE Devices

The VPNFilter malware that infected over 500,000 routers and NAS devices across 54 countries during the past few months is much worse than previously thought.
- Catalin Cimpanu
- June 06, 2018
- 11:51 AM
- 1
Prowli Malware Operation Infected Over 40,000 Servers, Modems, and IoT Devices

Cyber-criminals have managed to assemble a gigantic botnet of over 40,000 infected web servers, modems, and other IoT devices, which they used for cryptocurrency mining, and for redirecting users to malicious sites.
- Catalin Cimpanu
- June 06, 2018
- 10:28 AM
- 1
Botnet Authors Don’t Learn Anything From Victims and Secure Databases With Root/Root

Botnet operators can be as clueless about security as their victims, according to Ankit Anubhav Principal Researcher at NewSky Security, a cyber-security company specialized in IoT security.
- Catalin Cimpanu
- June 04, 2018
- 03:33 PM
- 0
The VPNFilter Botnet Is Attempting a Comeback

The VPNFilter botnet that was built by Russian cyberspies, which infected over 500,000 routers, and was taken down last week by the FBI is attempting a comeback, according to telemetry data gathered this week.
- Catalin Cimpanu
- June 02, 2018
- 05:00 AM
- 0
FBI Takes Control of APT28's VPNFilter Botnet

The US Federal Bureau of Investigation (FBI) has obtained court orders and has taken control of the command and control servers of a massive botnet of over 500,000 devices, known as the VPNFilter botnet.
- Catalin Cimpanu
- May 24, 2018
- 06:34 AM
- 3
Nation-State Group Hacked 500,000 Routers to Prepare a Cyber-Attack on Ukraine

Security researchers from Cisco said today that they've detected a giant botnet of hacked routers that appears to be preparing for a cyber-attack on Ukraine.
- Catalin Cimpanu
- May 23, 2018
- 10:55 AM
- 0
Spam Botnet Tracked Down to Malicious PHP Script Found on 5,000 Hacked Sites

A malicious PHP script found on over 5,000 compromised websites has been fingered as the source of a large-scale spam campaign that has been silently redirecting users to web pages hosting diet and intelligence boosting pills.
- Catalin Cimpanu
- May 23, 2018
- 12:50 AM
- 0
GPON Routers Attacked With New Zero-Day

Attacks on Dasan GPON routers are continuing to happen using two vulnerabilities disclosed last month, but today, researchers from Qihoo 360 Netlab have revealed that one botnet operator appears to have deployed a new zero-day affecting the same router types.
- Catalin Cimpanu
- May 21, 2018
- 12:10 PM
- 1
58% of Botnet Malware Infections Last Under a Day

The vast majority of botnet malware infections last under a day, according to a Fortinet report released last week —the Q1 2018 Threat Landscape Report.
- Catalin Cimpanu
- May 21, 2018
- 12:30 AM
- 1
The Satori Botnet Is Mass-Scanning for Exposed Ethereum Mining Rigs

The operators of the Satori botnet are mass-scanning the Internet for exposed Ethereum mining rigs, according to three sources in the infosec community who've observed the malicious behavior —SANS ISC, Qihoo 360 Netlab, and GreyNoise Intelligence.
- Catalin Cimpanu
- May 18, 2018
- 12:45 AM
- 0
DDoS Attacks Leverage UPnP Protocol to Avoid Mitigation

Attackers are experimenting with a new method of avoiding some DDoS mitigation solutions by employing the Universal Plug and Play (UPnP) protocol to mask the source port of network packets sent during the DDoS flood.
- Catalin Cimpanu
- May 15, 2018
- 12:15 AM
- 0
Botnet Party on GPON Routers

At least five IoT botnets are fighting each other and attempting to infect Dasan GPON routers, according to Chinese cyber-security firm Qihoo 360 Netlab.
- Catalin Cimpanu
- May 10, 2018
- 05:50 PM
- 0
"Hide and Seek" Becomes First IoT Botnet Capable of Surviving Device Reboots

Security researchers have discovered the first IoT botnet malware strain that can survive device reboots and remain on infected devices after the initial compromise.
- Catalin Cimpanu
- May 08, 2018
- 05:20 PM
- 0
Vulnerabilities Affecting Over One Million Dasan GPON Routers Are Now Under Attack

Two vulnerabilities affecting over one million routers, and disclosed earlier this week, are now under attack by botnet herders, who are trying to gather the vulnerable devices under their control.
- Catalin Cimpanu
- May 04, 2018
- 04:18 AM
- 0
Survey Reveals Users Have No Clue About Router Security

A recent survey of 2,205 regular users has proven once again that most people don't update router firmware, don't change default credentials, and don't generally know how to secure their devices.
- Catalin Cimpanu
- April 23, 2018
- 01:00 AM
- 7
Big IoT Botnet Starts Large-Scale Exploitation of Drupalgeddon 2 Vulnerability

A botnet made up of servers and smart devices has begun the mass exploitation of a severe Drupal CMS vulnerability and is using already compromised systems to infect new machines, in a worm-like behavior.
- Catalin Cimpanu
- April 20, 2018
- 11:27 AM
- 0
Over 65,000 Home Routers Are Proxying Bad Traffic for Botnets, APTs

Botnet operators and cyber-espionage groups (APTs) are abusing the Universal Plug and Play (UPnP) protocol that comes with all modern routers to proxy bad traffic and hide their real location from investigators.
- Catalin Cimpanu
- April 12, 2018
- 01:00 AM
- 3
GoScanSSH Malware Avoids Government and Military Servers

Security experts have discovered a new strain of malware that targets vulnerable Linux-based systems and tries its best to avoid infecting devices on government and military networks.
- Catalin Cimpanu
- March 26, 2018
- 02:15 PM
- 1
Chinese Crooks Assembling Massive Botnet of Nearly 5 Million Android Devices

A Chinese malware operation is currently building a massive botnet of nearly 5 million Android smartphones using a strain of malware named RottenSys.
- Catalin Cimpanu
- March 15, 2018
- 08:12 AM
- 0
New Mirai Variant Focuses on Turning IoT Devices into Proxy Servers

Security researchers have spotted a new variant of the Mirai malware that focuses on infecting IoT and networking equipment with the main purpose of turning these devices into a network of proxy servers used to relay malicious traffic.
- Catalin Cimpanu
- February 27, 2018
- 03:23 AM
- 0