SecureList

SEPTEMBER 21, 2023

Dark web services: DDoS attacks, botnets, and zero-day IoT vulnerabilities Of all IoT-related services offered on the dark web, DDoS attacks are worth examining first. See translation I’m the world’s best-known DDoS attacker for hire (getting ahead of myself here). Botnet based on Medusa, working since 2020.

IoT 101

IoT DDOS Passwords Malware 101

SecureList

NOVEMBER 26, 2021

This toolset was in use from as early as July 2020, mainly targeting Southeast Asian entities, including government agencies and telecoms companies. Apart from Trojanized installers, we also observed infections involving use of a UEFI (Unified Extensible Firmware Interface) and MBR (Master Boot Record) bootkit.

Malware 101

Malware Banking Energy and Utilities Accountability 101

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. In 2020, we published private reports featuring LODEINFO, a sophisticated fileless malware first mentioned in a blogpost from JPCERT/CC3. ToddyCat, a relatively new APT actor, is responsible for multiple attacks detected since December 2020. in June 2021.

Malware 137

Malware Firmware Government Phishing 137

CyberSecurity Insiders

SEPTEMBER 24, 2021

China-based video surveillance related product offering company Hikvision has issued a security advisory saying that all those using their security cameras and NVRs must know a critical vulnerability on its devices that could allow hackers to take control of the cameras and use them as bots to launch DDoS or other related attacks.

Surveillance 96

Surveillance Firmware DDOS IoT 96

SecureList

NOVEMBER 14, 2023

The threat actor used news about the Russo-Ukrainian conflict to trick targets into opening harmful emails that exploited the vulnerabilities (CVE-2020-35730, CVE-2020-12641 and CVE-2021-44026). First, they can carry out actual cyberattacks, including DDoS attacks , data theft or destruction, website defacement, and so on.

Hacking 119

Hacking Energy and Utilities Media Malware 119