MikroTik botnet relies on DNS misconfiguration to spread malware

Researchers discovered a 13,000-device MikroTik botnet exploiting DNS flaws to spoof 20,000 domains and deliver malware. Infoblox researchers discovered a botnet of 13,000 MikroTik devices that exploits DNS misconfigurations to bypass email protections, spoof approximately 20,000 domains, and deliver malware. In late November, the experts spotted a malspam campaign impersonating DHL which used emails about […]

Misconfigured email routing enables internal-spoofed phishing

securityaffairs.co - 14:57

Attackers exploit misconfigured email routing to spoof internal emails, using PhaaS platforms like Tycoon2FA to steal credentials. Attackers exploit...

React2Shell under attack: RondoDox Botnet spreads miners and malware

itsecuritynews.info - 01/Jan 15:02

RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers....

React2Shell under attack: RondoDox Botnet spreads miners and malware

itsecuritynews.info - 01/Jan 15:02

RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers....

React2Shell under attack: RondoDox Botnet spreads miners and malware

securityaffairs.co - 01/Jan 14:31

RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers....

React2Shell under attack: RondoDox Botnet spreads miners and malware

securityaffairs.co - 01/Jan 14:31

RondoDox botnet exploits the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers....

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

bleepingcomputer.com - 31/12/2025 14:58

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware...

Operation PCPcat Exploits Next.js and React, Impacting 59,000+ Servers

itsecuritynews.info - 24/12/2025 06:02

A sophisticated credential-stealing campaign named “Operation PCPcat” has compromised over 59,000 Next.js servers worldwide, exploiting critical...

Operation PCPcat Exploits Next.js and React, Impacting 59,000+ Servers

itsecuritynews.info - 24/12/2025 06:02

A sophisticated credential-stealing campaign named “Operation PCPcat” has compromised over 59,000 Next.js servers worldwide, exploiting critical...

Kimwolf Android botnet abuses residential proxies to infect internal devices

bleepingcomputer.com - 19:15

The Kimwolf botnet, an Android variant of the Aisuru malware, has grown to more than two million hosts, most of them infected by exploiting...

Kimwolf Android botnet abuses residential proxies to infect internal devices

bleepingcomputer.com - 19:15

The Kimwolf botnet, an Android variant of the Aisuru malware, has grown to more than two million hosts, most of them infected by exploiting...

Rubriques :

MikroTik botnet relies on DNS misconfiguration to spread malware

Articles similaires

Misconfigured email routing enables internal-spoofed phishing

React2Shell under attack: RondoDox Botnet spreads miners and malware

React2Shell under attack: RondoDox Botnet spreads miners and malware

React2Shell under attack: RondoDox Botnet spreads miners and malware

React2Shell under attack: RondoDox Botnet spreads miners and malware

RondoDox botnet exploits React2Shell flaw to breach Next.js servers

Operation PCPcat Exploits Next.js and React, Impacting 59,000+ Servers

Operation PCPcat Exploits Next.js and React, Impacting 59,000+ Servers

Kimwolf Android botnet abuses residential proxies to infect internal devices

Kimwolf Android botnet abuses residential proxies to infect internal devices

Les derniers communiqués