botnet

Machine-Speed Dwell Time: The Bot-Powered Recon of 'The Gentlemen'

John Z Black Apr 21, 2026

Ransomware & Cybercrime #gentlemen #systembc #ransomware #botnet #reconnaissance

A massive 1,570-host botnet linked to The Gentlemen ransomware has been unburied. These attackers are using automated proxy infrastructure to scout corporate networks before you even know they are there. Dwell time just got industrialized.

It Was a Good Week to Be a Federal Prosecutor

John Z Black Mar 29, 2026

Ransomware & Cybercrime #yanluowang #ransomware #botnet #doj #sentencing #cybercrime-enforcement #cisco #aleksei-volkov #ilya-angelov #ta551

Two cybercrime sentences landed in the same week: 81 months for the access broker who sold entry into Yanluowang's victims, and 2 years for the operator of the Mario Kart botnet that extorted more than 70 US companies.

31.4 Terabits in 35 Seconds: Cloudflare's New Threat Report Shows Attacks Have Gone Industrial

John Z Black Mar 29, 2026

Threat Intelligence #cloudflare #ddos #botnet #threat-report #aisuru #kimwolf #session-tokens #mfa-bypass #telecom #doj

Cloudflare's 2026 threat report documents a record-breaking 31.4 Tbps DDoS attack and reveals that 94% of bot-driven login attempts now bypass MFA by stealing session tokens instead of passwords.

The 31.4 Tbps Botnet Crackdown Signals a New DDoS Enforcement Phase

John Z Black Mar 21, 2026

Ransomware & Cybercrime #ddos #botnet #iot #law-enforcement #takedown #aisuru #kimwolf #threat-intelligence

US, German, and Canadian authorities dismantled four major DDoS botnets spanning 3 million IoT devices and record-setting attacks. The how matters as much as the what.

Botnet Takedown at Massive Scale: Good News, Short Window

John Z Black Mar 21, 2026

Threat Intelligence #botnet #ddos #doj #iot-security #threat-disruption

New scale confirmation makes this takedown meaningful, but defenders only win if they use the brief recovery window to harden fast.

The SocksEscort Takedown: Your Linux Server Might Be Someone Else's Criminal Proxy

John Z Black Mar 13, 2026

Cybercrime #socksescort #botnet #proxy #linux #takedown #law-enforcement #infrastructure

US authorities dismantled SocksEscort, a proxy-for-hire botnet built on silently infected Linux devices. Here's why this takedown matters more than it seems, and why 'it's Linux, it's fine' isn't a security posture.

The Edge Is the Front Line: FortiGate, ASUS Routers, and the War on Network Perimeters

John Z Black Mar 11, 2026

Threat Intelligence #fortigate #asus #botnet #edge-devices #network-security #kadnap

Enterprise firewalls and consumer routers are getting hammered. FortiGate credential theft and the KadNap botnet show the same failure at the network edge.