RondoDox botnet exploits React2Shell flaw to breach Next.js servers

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...
Bleeping Computer

New botnet malware exploits two zero-days to infect NVRs and routers

A new Mirai-based malware botnet named 'InfectedSlurs' has been exploiting two zero-day remote code execution (RCE) vulnerabilities to infect routers and video recorder (NVR) devices. The malware ...
Morning Overview on MSN

Kimwolf DDoS botnet already grabbed 1.8M devices. What we know

Kimwolf is the latest reminder that the most dangerous botnets now grow quietly inside everyday consumer electronics.
SecurityWeek

‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices

Consisting of over 1.8 million infected devices, the Kimwolf Android Botnet focuses on traffic proxying, but can also launch ...
Ars Technica

11 million devices infected with botnet malware hosted in Google Play

Five years ago, researchers made a grim discovery—a legitimate Android app in the Google Play market that was surreptitiously made malicious by a library the developers used to earn advertising ...
Dark Reading

IoT Botnets Are Increasing Source of Malware on SP Networks

Botnets are increasingly making up more and more of the malware traffic found on service provider networks, with cybercriminals using these Internet of Things bots for a range of malicious schemes, ...
Dark Reading

HNS IoT Botnet Evolves, Goes Cross-Platform

A fast-evolving botnet discovered earlier this year that initially targeted Internet of Things (IoT) devices such as home routers and DVRs is now taking aim at NoSQL database servers. The Hide 'N Seek ...
SiliconANGLE

Federal agencies warn that Androxgh0st malware operators are building a botnet

The U.S. Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency have issued a warning that the hackers behind the Androxgh0st malware are creating a new, powerful ...
TechRepublic

Androxgh0st Malware Botnet Steals AWS, Microsoft Credentials and More

The Androxgh0st malware botnet is used for victim identification and exploitation in targeted networks, as well as credentials collection. Read the FBI/CISA's tips for protecting against this malware ...
CSOonline

Mirai-based NoaBot botnet deploys cryptominer on Linux servers

A new botnet has been slowly growing over the past year by brute-forcing SSH logins and deploying cryptomining malware on Linux servers. The main bot client is based on the old Mirai worm whose source ...
Computerworld

Storm botnet spreading malware through GeoCities

Storm, the botnet-building Trojan horse, has come up with another twist to dupe users into infecting their PCs with malware, a security researcher said today. Longtime clients of the Russian Business ...