Malware & Threats Europol Targets Customers of Smokeloader Pay-Per-Install Botnet Law enforcement agencies in multiple countries have announced the arrests of users of the malicious Smokeloader botnet. Ionut ArghireApril 10, 2025
Malware & Threats Unpatched Edimax Camera Flaw Exploited Since at Least May 2024 A recently disclosed Edimax zero-day vulnerability has been exploited in the wild by Mirai botnets for nearly a year. Eduard KovacsMarch 13, 2025
Malware & Threats New Ballista IoT Botnet Linked to Italian Threat Actor Cato Networks has analyzed a new IoT botnet named Ballista, which targets TP-Link Archer routers. Eduard KovacsMarch 11, 2025
IoT Security Edimax Says No Patches Coming for Zero-Day Exploited by Botnets Edimax is aware that CVE-2025-1316 has been exploited in the wild, but the impacted devices were discontinued over a decade ago. Eduard KovacsMarch 11, 2025
IoT Security Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution. Eduard KovacsMarch 7, 2025
IoT Security BadBox Botnet Powered by 1 Million Android Devices Disrupted A second iteration of the BadBox botnet that affected over one million Android devices has been partially disrupted. Ionut ArghireMarch 6, 2025
IoT Security New Eleven11bot DDoS Botnet Powered by 80,000 Hacked Devices The Eleven11bot botnet has been described as one of the largest known DDoS botnets observed in recent years. Eduard KovacsMarch 5, 2025
IoT Security Vo1d Botnet Evolves as It Ensnares 1.6 Million Android TV Boxes The Vo1d botnet is now powered by 1.6 million Android TV devices, up from 1.3 million half a year ago. Eduard KovacsFebruary 28, 2025
Malware & Threats Chinese Botnet Powered by 130,000 Devices Targets Microsoft 365 Accounts A China-linked botnet powered by 130,000 hacked devices has targeted Microsoft 365 accounts with password spraying attacks. Eduard KovacsFebruary 25, 2025
Application Security MirrorTab Raises $8.5M Seed Round to Take on Browser-Based Attacks San Francisco startup secures $8.5 million in seed funding led by Valley Capital Partners to tackle browser-based malware attacks. Ryan NaraineFebruary 18, 2025
Malware & Threats Aquabot Botnet Targeting Vulnerable Mitel Phones The Mirai-based Aquabot botnet has been targeting a vulnerability in Mitel SIP phones for which a proof-of-concept (PoC) exploit exists. Ionut ArghireJanuary 29, 2025
Malware & Threats Murdoc Botnet Ensnaring Avtech, Huawei Devices The Mirai-based Murdoc botnet has been actively targeting Avtech and Huawei devices for roughly half a year. Ionut ArghireJanuary 22, 2025
IoT Security Botnet of 190,000 BadBox-Infected Android Devices Discovered Bitsight has discovered a BadBox botnet consisting of over 190,000 Android devices, mainly Yandex smart TVs and Hisense smartphones. Ionut ArghireDecember 20, 2024
Malware & Threats Juniper Warns of Mirai Botnet Targeting Session Smart Routers Juniper Networks says a Mirai botnet is ensnaring session smart router devices that are using default passwords. Ionut ArghireDecember 19, 2024
Cybercrime Threat Actor Turns Thousands of IoT Devices Into Residential Proxies A threat actor tracked as Water Barghest has compromised over 20,000 IoT devices and monetizes them as residential proxies. Ionut ArghireNovember 19, 2024
Malware & Threats Discontinued GeoVision Products Targeted in Botnet Attacks via Zero-Day A zero-day vulnerability affecting five discontinued GeoVision product models has been exploited by a botnet. Ionut ArghireNovember 18, 2024
Nation-State China’s Volt Typhoon Rebuilding Botnet Security researchers say the botnet created by China’s Volt Typhoon re-emerged recently, leveraging the same core infrastructure and techniques. Eduard KovacsNovember 13, 2024
Nation-State US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon The US government has announced the disruption of Raptor Train, a Flax Typhoon botnet powered by hacked consumer devices. Eduard KovacsSeptember 19, 2024
Malware & Threats Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military Black Lotus Labs estimates that more than 200,000 routers, network-attached storage servers, and IP cameras have been ensnared in the botnet. Ryan NaraineSeptember 18, 2024
Malware & Threats Recent Zyxel NAS Vulnerability Exploited by Botnet A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products. Ionut ArghireJune 25, 2024