Mirai Botnet Activity Surges After Hackers Compromise cPanel Hosting Servers
Mirai-like botnet activity sharply increased in early May 2026 after attackers apparently compromised hosting servers running cPanel and WHM administration software.
Japan’s JPCERT/CC reported...
Linux Botnet Uses NVIDIA NIM to Turn Host Telemetry Into Actionable Attack Commands
ToxNetV2, an AArch64 Linux peer-to-peer botnet, has integrated an LLM into its controller workflow, allowing host and botnet telemetry to be converted into structured...
Aeternum Botnet Hides C2 Infrastructure in Polygon Smart Contracts to Evade Takedowns
Security researchers have uncovered Aeternum, a C++-based botnet loader that uses the Polygon blockchain to host command-and-control (C2) instructions.
Rather than relying on traditional...
Evooo1Bot Linux Botnet Hijacks Routers and Firewalls for DDoS, SOCKS5 Proxy and Credential Theft
The threat targets internet-facing routers, firewalls, cameras, and other edge devices, turning compromised systems into tools for DDoS attacks, SOCKS5 proxy relays, credential theft,...
Dysphoria Botnet Compromises 296,000 IoT Devices for DDoS and Residential Proxy Operations
A Special Report has identified approximately 296,000 internet-connected devices compromised by the Dysphoria botnet, marking a major expansion of an IoT threat already associated...