Research reports
1,224 reports from 387 publishers45 added in the past week
35 reports, newest added first
Added Wed 8 Apr
Hacktivists Call for Release of Telegram Founder with #FreeDurov DDoS Campaign
In recent weeks, a new hacktivist campaign has emerged to demand the release of Telegram CEO Pavel Durov, after his arrest by French authorities. In this report, Check Point Research explores the most prominent and dominant hacking groups involved in the…
Botnets and DDoSTakedowns and arrests
Added Tue 7 Apr
Six-day, 14.7 Million RPS Web DDoS Attack Campaign Attributed to SN_BLACKMETA
Key Attack Insights: Web DDoS attack campaign lasted six days and peaked at 14.7 Million RPS Featured multiple attack waves amounting to a total of 100 hours of attack time Sustained an average of 4.5 million RPS Targeted a financial institution in the Middle…
Botnets and DDoS
Justice Department Announces Court-Authorized Disruption of Botnet Controlled by the Russian Federation’s Main Intelligence Directorate (GRU)
Operation Copied and Removed Malware Known as “Cyclops Blink” from the Botnet’s Command-And-Control Devices, Disrupting the GRU’s Control Over Thousands of Infected Devices Worldwide. Victims Must Take Additional Steps to Remediate the Vulnerability and…
VulnerabilitiesBotnets and DDoS
Russian Botnet Disrupted in International Cyber Operation
SAN DIEGO – The U.S. Department of Justice, together with law enforcement partners in Germany, the Netherlands and the United Kingdom, have dismantled the infrastructure of a Russian botnet known as RSOCKS which hacked millions of computers and other…
Botnets and DDoSTakedowns and arrests
Added Mon 6 Apr
Encrypted Channel, Technique T1573 - Enterprise
APT29 has used multiple layers of encryption within malware to protect C2 communication.[1] G1002 BITTER BITTER has encrypted their C2 communications.[2] S0631 Chaes Chaes has used encryption for its C2 channel.[3] S0498 Cryptoistic Cryptoistic can engage in…
State-sponsoredMalwareBotnets and DDoS
Encrypted Channel, Technique T1573 - Enterprise
APT29 has used multiple layers of encryption within malware to protect C2 communication.[1] G1002 BITTER BITTER has encrypted their C2 communications.[2] S0631 Chaes Chaes has used encryption for its C2 channel.[3] S0498 Cryptoistic Cryptoistic can engage in…
State-sponsoredMalwareBotnets and DDoS
Cutwail botnet
The Cutwail botnet, founded around 2007,[1] is a botnet mostly involved in sending spam e-mails. The bot is typically installed on infected machines by a Trojan component called Pushdo. [2] It affects computers running Microsoft Windows. [3] In June 2009 it…
Botnets and DDoS
Added Thu 26 Feb
201106_hamweq.pdf
Botmaster - osoba sprawująca kontrolę nad botnetem poprzez serwer CC. Zombie - zainfekowany komputer pod kontrolą botmastera. Botnet - zbiór komputerów Zombie, połączonych do danego serwera CC. Server CC - serwer poprzez który sprawowana jest kontrola nad…
Botnets and DDoS
Added Fri 25 Jul 2025
Anatomy of DDoSia: NoName057(16)'s DDoS Infrastructure and Targeting
NoName057(16) uses a resilient, multi-tiered infrastructure featuring rapidly rotated Tier 1 command-and- control (C2) servers and access- controlled Tier 2 servers to enhance operational security. NoName057(16) maintains a high operational tempo, averaging…
Botnets and DDoS
Added Wed 15 Jan 2025
Jul-Dec 2024 Botnet Threat Update.pdf
This report provides an overview of the number of botnet C&Cs associated with these elements, along with a quarterly comparison. We discuss the trends we are observing and highlight service providers struggling to control the number of botnet operators…
Botnets and DDoS
Added Tue 24 Sep 2024
CSA-PRC-LINKED-ACTORS-BOTNET.PDF
To report suspicious or criminal activity related to information found in this joint Cybersecurity Advisory, contact your local FBI field office. When available, please include the following information regarding the incident: date, time, and location of the…
Botnets and DDoS
Added Tue 23 Jul 2024
Jan-Jun 2024 Botnet Threat Update.pdf
This report provides an overview of the number of botnet C&Cs associated with these elements, along with a quarterly comparison. We discuss the trends we are observing and highlight service providers struggling to control the number of botnet operators…
Botnets and DDoS
Added Sat 27 Apr 2024
Added Tue 16 Apr 2024
Uncovering a broad criminal ecosystem powered by one of the largest botnets, Glupteba
Botnets continue to represent a serious threat for companies and individuals worldwide. However, little is known about exactly how botnets are monetized and how revenues flow to criminal actors. Our research uncovers a whole criminal network of organizations…
Botnets and DDoS
Added Fri 12 Apr 2024
VB2020 paper: Lightweight emulation based IOC extraction for Gafgyt botnets
The long-established botnet family of Gafgyt is still very active today. While new C2 servers emerge quickly, they usually remain active for only a few days. To effectively fight such quickly emerging while short-lived families, quick IoC extraction is…
Botnets and DDoS
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.