EnemyBot malware adds new exploits to target CMS servers and Android devicesSecurity Affairs·May 30, 07:09 UTC · May 30, 2022MalwareCVE-2020-17456CVE-2018-10823CVE-2022-27226+19 CVEs60
Attackers Exploit DVR Command Injection Flaw to Deploy BotnetInfosecurity Magazine·Apr 20, 13:01 UTC · Apr 20, 2026MalwareCVE-2024-3721CVE-2017-1721560
Infostealers increasingly impact global securityHelp Net Security·Nov 13, 00:00 UTC · Nov 13, 2024MalwareCVE-2010-4598CVE-2011-2474CVE-2014-0130+15 CVEs60
Mukashi: A New Mirai IoT Botnet Variant Targeting Zyxel NAS DevicesThe Hacker News·Jun 10, 14:51 UTC · Jun 10, 2020MalwareCVE-2020-905460
Zerobot Botnet Emerges as a Growing Threat with New Exploits and CapabilitiesThe Hacker News·Jul 26, 17:38 UTC · Jul 26, 2023MalwareCVE-2021-42013CVE-2022-33891CVE-2017-17105+4 CVEs60
Mirai V3G4 botnet exploits 13 flaws to target IoT devicesSecurity Affairs·Feb 16, 21:32 UTC · Feb 16, 2023MalwareCVE-2012-4869CVE-2014-9727CVE-2017-5173+6 CVEs60
Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai BotnetThe Hacker News·May 9, 03:55 UTC · May 9, 2025Malware in the wildCVE-2024-6047CVE-2024-11120CVE-2018-10561+1 CVEs60
Moobot botnet spreads by targeting Cacti and RealTek flawsSecurity Affairs·Apr 3, 07:45 UTC · Apr 3, 2023MalwareCVE-2022-46169CVE-2021-35394CVE-2021-3626060
From Box to Backdoor: Discovering Just How Insecure an ICS Device is in Only 2 WeeksCisco Talos·Apr 10, 16:11 UTC · Apr 10, 2017MalwareCVE-2016-8712CVE-2016-8721CVE-2016-8718+1 CVEs60
Corona Mirai botnet spreads via AVTECH CCTV zeroSecurity Affairs·Aug 29, 12:50 UTC · Aug 29, 2024MalwareCVE-2024-7029CVE-2017-17215CVE-2014-8361160
Widespread exploitation by botnet operators of Zyxel firewall flawSecurity Affairs·Jun 1, 07:24 UTC · Jun 1, 2023Malware in the wildCVE-2023-2877160
Multiple DDoS botnets were observed targeting Zyxel devicesSecurity Affairs·Jul 22, 17:02 UTC · Jul 22, 2023Malware in the wildCVE-2023-2877160
Zyxel firewalls under attack by Mirai-like botnetHelp Net Security·Jun 1, 00:00 UTC · Jun 1, 2023Malware in the wildCVE-2023-28771CVE-2023-33009CVE-2023-3301060
A botnet exploits e GeoVision zeroSecurity Affairs·Nov 17, 04:53 UTC · Nov 17, 2024MalwareCVE-2024-1112060
ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware WavesThe Hacker News·Nov 21, 06:45 UTC · Nov 21, 2025MalwareCVE-2025-61757CVE-2025-1124360
Mirai botnet also spreads through the exploitation of Ivanti Connect Secure bugsSecurity Affairs·May 9, 13:42 UTC · May 9, 2024MalwareCVE-2023-46805CVE-2024-2188760
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosureSecurity Affairs·Feb 3, 15:41 UTC · Feb 3, 2026Malware in the wildCVE-2025-11953160
New Ballista Botnet spreads using TPSecurity Affairs·Mar 12, 09:51 UTC · Mar 12, 2025MalwareCVE-2023-138960
Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023Help Net Security·Mar 1, 00:00 UTC · Mar 1, 2026Malware in the wildCVE-2026-25108CVE-2026-20127160
RondoDox Botnet Exploits Flaws in TBK DVRs and FourThe Hacker News·Jul 8, 12:44 UTC · Jul 8, 2025MalwareCVE-2024-3721CVE-2024-1285660
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
Moobot botnet exploits CVE-2021Security Affairs·Dec 9, 08:16 UTC · Dec 9, 2021MalwareCVE-2021-3626060
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud ServicesThe Hacker News·Dec 18, 10:49 UTC · Dec 18, 2024MalwareCVE-2021-41773CVE-2018-15133CVE-2017-9841+12 CVEs60
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoSThe Hacker News·Jun 30, 17:45 UTC · Jun 30, 2026Malware in the wildCVE-2017-17215CVE-2025-29635CVE-2024-1781+1 CVEs160
Broadside botnet hits TBK DVRs, raising alarms for maritime logisticsSecurity Affairs·Dec 9, 15:13 UTC · Dec 9, 2025MalwareCVE-2024-372160
Zyxel NAS, firewalls and LILIN DVRs and IP cameras conscripted into IoT botnetsHelp Net Security·Mar 23, 00:00 UTC · Mar 23, 2020MalwareCVE-2020-905460
Operation WrtHug hijacks 50,000+ ASUS routers to build a global botnetSecurity Affairs·Nov 19, 18:32 UTC · Nov 19, 2025MalwareCVE-2023-41345CVE-2023-41348CVE-2024-12912+1 CVEs60
Thousands of ASUS Routers Hijacked in Stealthy Backdoor CampaignInfosecurity Magazine·May 29, 13:05 UTC · May 29, 2025MalwareCVE-2023-3978060
Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New MalwareThe Hacker News·Feb 29, 07:05 UTC · Feb 29, 2024Malware in the wildCVE-2024-21893CVE-2024-2188760
New Aquabot Botnet Exploits CVE-2024The Hacker News·Jan 30, 06:41 UTC · Jan 30, 2025Malware in the wildCVE-2024-41710CVE-2018-10561CVE-2018-10562+3 CVEs60
New Mirai botnet variant appears in the threat landscapeSecurity Affairs·Mar 16, 21:54 UTC · Mar 16, 2021MalwareCVE-2020-25506CVE-2021-27561CVE-2021-27562+3 CVEs60
Mirai-like botnet is exploiting recently disclosed Zyxel NAS flawSecurity Affairs·Jun 25, 16:52 UTC · Jun 25, 2024Malware in the wildCVE-2024-29973CVE-2023-2799260
Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT DevicesThe Hacker News·Oct 29, 15:38 UTC · Oct 29, 2025Malware in the wildCVE-2017-9841CVE-2021-3129CVE-2022-47945+2 CVEs160
Critical Flaws Leave 92,000 D-Link NAS Devices Vulnerable to Malware AttacksThe Hacker News·Apr 9, 05:46 UTC · Apr 9, 2024MalwareCVE-2024-3272CVE-2024-327360
Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader MalwareSecurity Affairs·Jan 31, 11:45 UTC · Jan 31, 2024MalwareCVE-2023-46805CVE-2024-2188760
Mirai-based botnet IZ1H9 added 13 payloads to target routersSecurity Affairs·Oct 11, 13:55 UTC · Oct 11, 2023Malware in the wildCVE-2015-1187CVE-2016-20017CVE-2020-25506+8 CVEs60
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & MoreThe Hacker News·Oct 3, 04:59 UTC · Oct 3, 2025MalwareCVE-2024-3400CVE-2017-792160
Moobot botnet is back and targets vulnerable DSecurity Affairs·Sep 7, 07:59 UTC · Sep 7, 2022MalwareCVE-2021-36260CVE-2015-2051CVE-2018-6530+2 CVEs60
Hackers Deploy Python Backdoor in Palo Alto ZeroThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2024Malware in the wildCVE-2024-3400160
Hackers Deploy "SUBMARINE" Backdoor in Barracuda Email Security Gateway AttacksThe Hacker News·Aug 2, 03:14 UTC · Aug 2, 2023MalwareCVE-2023-286860