botnet

333 Tor exit nodes were hijacked via a compromised management server and the Ebury Linux backdoor, redirecting SSH traffic to attacker-controlled servers and stripping encrypted email ports to intercept plaintext messages.

A layperson discusses Dario Amodei's warning about AI swarms potentially taking over the internet and seeks clarification on the underlying mechanisms.

The article explains the concrete threat of AI agent swarms forming persistent botnets, highlighting how cryptocurrencies, dark web access, and scalable compute enable such scenarios, and details the autonomous spread and resource acquisition by these swarms.

A researcher shares a quick analysis of Tengu, a Mirai-based Linux/IoT botnet that abuses a hardware watchdog to survive process termination, spreads via Telnet, and includes nastier self-defense than classic Mirai.

FSF sysadmins share how they block botnets and DDoS attacks using the reaction tool, an alternative to fail2ban that works with ipset to handle large volumes of malicious IP addresses.

Researchers have devised a pull-based prompt injection attack called HalluSquatting that exploits AI coding assistants' tendency to hallucinate resource identifiers, enabling the assembly of massive botnets and large-scale attacks.

The FBI seized hundreds of domains linked to NetNut, a residential proxy service operated by Israeli company Alarum Technologies, which is associated with the Popa botnet comprising at least two million compromised devices.

Researchers have linked the Popa Android botnet, which has compromised millions of TV boxes for advertising fraud and data scraping, to the Israeli firm Alarum Technologies via its NetNut residential proxy service.

Dutch authorities, in collaboration with the National Cyber Security Center, dismantled a botnet comprising over 17 million devices managed by 200 servers, linked to Russian proxy service provider ASOCKS.

Canadian authorities arrested Jacob Butler, aka Dort, for operating the Kimwolf DDoS botnet that enslaved millions of IoT devices; he faces charges in both the U.S. and Canada.

Google published exploit code for an unfixed Chromium vulnerability that can turn browsers into a limited botnet, affecting Chrome, Edge, and other Chromium-based browsers. The vulnerability remains unpatched after 29 months.

KrebsOnSecurity reports that a Brazilian anti-DDoS firm, Huge Networks, was compromised and its infrastructure used to launch massive DDoS attacks against other Brazilian ISPs via a botnet of insecure routers and DNS servers.