Malware & Threats Europol Targets Customers of Smokeloader Pay-Per-Install Botnet Law enforcement agencies in multiple countries have announced the arrests of users of the malicious Smokeloader botnet. Ionut ArghireApril 10, 2025
Malware & Threats Unpatched Edimax Camera Flaw Exploited Since at Least May 2024 A recently disclosed Edimax zero-day vulnerability has been exploited in the wild by Mirai botnets for nearly a year. Eduard KovacsMarch 13, 2025
Malware & Threats New Ballista IoT Botnet Linked to Italian Threat Actor Cato Networks has analyzed a new IoT botnet named Ballista, which targets TP-Link Archer routers. Eduard KovacsMarch 11, 2025
IoT Security Edimax Says No Patches Coming for Zero-Day Exploited by Botnets Edimax is aware that CVE-2025-1316 has been exploited in the wild, but the impacted devices were discontinued over a decade ago. Eduard KovacsMarch 11, 2025
IoT Security Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution. Eduard KovacsMarch 7, 2025
IoT Security BadBox Botnet Powered by 1 Million Android Devices Disrupted A second iteration of the BadBox botnet that affected over one million Android devices has been partially disrupted. Ionut ArghireMarch 6, 2025
IoT Security New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices The Eleven11bot botnet has been described as one of the largest known DDoS botnets observed in recent years. Eduard KovacsMarch 5, 2025
IoT Security Vo1d Botnet Evolves as It Ensnares 1.6 Million Android TV Boxes The Vo1d botnet is now powered by 1.6 million Android TV devices, up from 1.3 million half a year ago. Eduard KovacsFebruary 28, 2025
Malware & Threats Chinese Botnet Powered by 130,000 Devices Targets Microsoft 365 Accounts A China-linked botnet powered by 130,000 hacked devices has targeted Microsoft 365 accounts with password spraying attacks. Eduard KovacsFebruary 25, 2025
Application Security MirrorTab Raises $8.5M Seed Round to Take on Browser-Based Attacks San Francisco startup secures $8.5 million in seed funding led by Valley Capital Partners to tackle browser-based malware attacks. Ryan NaraineFebruary 18, 2025
Malware & Threats Aquabot Botnet Targeting Vulnerable Mitel Phones The Mirai-based Aquabot botnet has been targeting a vulnerability in Mitel SIP phones for which a proof-of-concept (PoC) exploit exists. Ionut ArghireJanuary 29, 2025
Malware & Threats Murdoc Botnet Ensnaring Avtech, Huawei Devices The Mirai-based Murdoc botnet has been actively targeting Avtech and Huawei devices for roughly half a year. Ionut ArghireJanuary 22, 2025