Stay informed on botnet trends, attacks, and defenses. Get the latest updates and expert insights on botnet threats in information security.
Search across headline titles and summaries.
Background for this topic.
A botnet is a network of internet-connected devices that have been infected by malware and are controlled by a threat actor, commonly called a "botmaster." Each compromised device, known as a "bot," is directed to perform tasks without the user's knowledge. These tasks can include launching Distributed Denial of Service (DDoS) attacks, stealing data, sending spam, or executing phishing scams.
In the context of information security, botnets pose a significant threat as they can harness massive volumes of compromised devices to disrupt services, compromise data integrity, and exploit network vulnerabilities on a large scale. Protecting against botnet-related activities involves deploying security measures such as firewalls, antivirus software, intrusion detection systems (IDS), and maintaining secure and regularly updated systems to prevent devices from being turned into bots.
Weekly headline count for the current query.
Botnet Operators Execute First Known Exploit of Nearly Decade-Old FlawOperators behind a botnet picked up on a nearly decade-old flaw in Asus routers allowing an unauthenticated attacker to achieve remote code execution as a root user. VulnCheck began observing exploitation of the Asus vulnerability on May 17.
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed denial-of-service (DDoS) attacks
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to enlist devices into the botnet. [...]
FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices
Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42