A newly documented Linux botnet named SSHStalker is using the IRC (Internet Relay Chat) communication protocol for command-and-control (C2) operations. The protocol was invented in 1988, and its ...

PoeLLM malware reads a GitHub poem to find its C2 servers and has hit more than 3,400 servers, mostly AI tools like LiteLLM and Ollama.

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling ...

The PurpleFox botnet has refreshed its arsenal with new vulnerability exploits and dropped payloads, now also leveraging WebSockets for C2 bidirectional communication. Although it's mainly based in ...

According to new research published by Akamai on Tuesday, the technique is being harnessed by operators of a long-running cryptocurrency mining botnet campaign, in which BTC blockchain transactions ...

A Russian-speaking threat actor known as “bandcampro” used a jailbroken Gemini CLI, Google’s open-source terminal-based AI agent, to deploy and operate a small command-and-control (C2) botnet, ...

Investigators have already seen that Kimwolf’s C2 domains have been successfully taken down by unknown parties at least three times in Dec, yet the botnet has always returned stronger, a pattern ...

Explore the latest news, real-world incidents, expert analysis, and trends in botnet — only on The Hacker News, the leading ...

Last week, Google announced that it had partially disrupted the operations of a massive botnet—a gargantuan network of over one million malware-infected Windows computers. In the world of ...