GitHubPublished
public-research/potassium/report.md at main · deepfield/public-research
By deepfield-ert
Excerpt
First published: 2026-05-20 | Last updated: 2026-05-21
Content warning: This report quotes malware artifacts verbatim, including domain names, URL paths, campaign tags, and embedded strings chosen by the threat actor. Some contain crude or offensive language, including an antisemitic slur. These are reproduced exactly as found in samples to enable accurate detection and attribution.
Summary
Potassium is a Mirai-derived DDoS botnet, first publicly identified in March 2026 by Synthient and named aft…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by GitHub on github.com.
Mentioned in the excerpt
More from GitHub49
- How-to-use-msfvenomGitHub · Added 19 Oct
- GitHub - FallenAstaroth/stink: the cutest python-native infostealerGitHub · Added 18 Oct
- cti/runster/readme.md at main · cert-orangecyberdefense/ctiGitHub · Added 16 Oct
On the same topics
- Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware FamilySilent Push · Published 4 Feb
- The DGA of Sisronbin.re · Added 25 Oct
- JDY Botnet: How IoT and SOHO Devices Are ExploitedLumen Black Lotus Labs · Added 10 Oct
- Who Invited Aisuru to the LAN Party?Bitsight · Published 18 Aug
