The Hacker News

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

RondoDox botnet exploits the React2Shell vulnerability in Next.js, with over 90,000 exposed systems used to deploy miners and ...

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...
Dark Reading

Up-And-Coming Botnet Uses Same Malware Kit As Defunct Mariposa

A financial-fraud botnet built with the same malware kit used in the now-defunct Mariposa botnet remains active after arrests this month of two Eastern European men who allegedly ran it. Researchers ...
Morning Overview on MSN

Kimwolf DDoS botnet already grabbed 1.8M devices. What we know

Kimwolf is the latest reminder that the most dangerous botnets now grow quietly inside everyday consumer electronics.
SecurityWeek

‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices

Consisting of over 1.8 million infected devices, the Kimwolf Android Botnet focuses on traffic proxying, but can also launch ...
Threat Post

Qakbot Botnet Sprouts Fangs, Injects Malware into Email Threads

The ever-shifting, ever-more-powerful malware is now hijacking email threads to download malicious DLLs that inject password-stealing code into webpages, among other foul things. The Qakbot botnet is ...
Dark Reading

Mylobot Botnet & Khalesi Malware Deliver One-Two Security Punch

Mylobot, a recently discovered botnet that can elude antivirus software and sandboxes, is now able to deliver Khalesi information stealer malware on infected machines as part of a secondary attack, ...
PC World

New botnet malware infects 1.6 million Android TV devices worldwide

Vo1d is a long-known botnet that infects Android TV devices, and security experts from XLab have now discovered a new variant that’s said to have infected over 1.6 million Android TV devices around ...
The Verge

FBI makes a massive botnet infecting more than 700,000 computers uninstall itself

“Operation Duck Hunt” targeted Qakbot malware that remotely controls computers and sets them up for other attacks, like ransomware. “Operation Duck Hunt” targeted Qakbot malware that remotely controls ...
Bleeping Computer

New botnet malware exploits two zero-days to infect NVRs and routers

A new Mirai-based malware botnet named 'InfectedSlurs' has been exploiting two zero-day remote code execution (RCE) vulnerabilities to infect routers and video recorder (NVR) devices. The malware ...
TechCrunch

Security researchers observed ‘deliberate’ takedown of notorious Mozi botnet

Security researchers say they have observed what they believe is a takedown of the notorious Mozi botnet that infiltrated more than a million Internet of Things devices worldwide. In research shared ...
TechRepublic

Androxgh0st Malware Botnet Steals AWS, Microsoft Credentials and More

The Androxgh0st malware botnet is used for victim identification and exploitation in targeted networks, as well as credentials collection. Read the FBI/CISA's tips for protecting against this malware ...