Botnet Threats

MeetC2 - A serverless C2 framework that leverages Google Calendar APIs as a communication channel Source: https://securityaffairs.com/181940/security/meetc2-a-serverless-c2-framework-that-leverages-google-calendar-apis-as-a-communication-channel.html

Botnet#infosecnews#redditGermany+6

Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling Source: https://thehackernews.com/2025/08/attackers-abuse-velociraptor-forensic.html

Botnet#infosecnews#redditGermany+7

IoT under siege: The return of the Mirai-based Gayfemboy Botnet Source: https://securityaffairs.com/181480/cyber-crime/iot-under-siege-the-return-of-the-mirai-based-gayfemboy-botnet.html

Botnet#infosecnews#redditGermany+6

DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks Source: https://thehackernews.com/2025/08/doj-charges-22-year-old-for-running.html

Botnet#infosecnews#redditGermany+7

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP Source: https://thehackernews.com/2025/08/new-win-ddos-flaws-let-attackers-turn.html

Botnet#infosecnews#redditGermany+7

A large-scale Malware-as-a-Service operation, orchestrated by Chinese-speaking threat actors, has infected over 11,000 Android devices globally with the PlayPraetor Remote Access Trojan. The campaign primarily targets Europe, with significant presence in Portugal, Spain, and France, but also affects Africa, Latin America, and Asia. The botnet is expanding rapidly, with over 2,000 new infections weekly, focusing on Spanish and French speakers. The operation is managed through a sophisticated Chinese-language Command and Control panel, supporting multiple affiliates. PlayPraetor abuses Android's Accessibility Services to gain real-time control over compromised devices, targeting nearly 200 banking apps and cryptocurrency wallets worldwide.

Botnet#cryptocurrency#playpraetorFrance+2

New Ghost Calls tactic abuses Zoom and Microsoft Teams for C2 operations Source: https://www.bleepingcomputer.com/news/security/new-ghost-calls-tactic-abuses-zoom-and-microsoft-teams-for-c2-operations/

Botnet#infosecnews#redditGermany+7

Google sues to disrupt BadBox 2.0 botnet infecting 10 million devices Source: https://www.bleepingcomputer.com/news/security/google-sues-to-disrupt-badbox-20-botnet-infecting-10-million-devices/

Botnet#infosecnews#redditGermany+7

Hyper-Volumetric DDoS Attacks Reach Record 7.3 Tbps, Targeting Key Global Sectors Source: https://thehackernews.com/2025/07/hyper-volumetric-ddos-attacks-reach.html

Botnet#infosecnews#redditGermany+9

LLM crawlers continue to DDoS SourceHut Source: https://status.sr.ht/issues/2025-03-17-git.sr.ht-llms/

Botnet#netsec#redditGermany+4

Akamai Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks Source: https://hackread.com/sophisticated-ddos-campaigns-crippling-global-banks/

Botnet#infosecnews#redditUnited Kingdom+7

GoClipC2 - Clipboard for C2 on Windows in Go Source: https://blog.zsec.uk/clippy-goes-rogue/

Botnet#netsec#redditGermany+6

New Mirai botnet infect TBK DVR devices via command injection flaw Source: https://www.bleepingcomputer.com/news/security/new-mirai-botnet-infect-tbk-dvr-devices-via-command-injection-flaw/

Botnet#infosecnews#redditGermany+9

StormWall Reveals India, China and US Faced Most DDoS Attacks in Q1 2025

Botnet#infosecnews#redditUnited Kingdom+5