Top AI tools such as OpenClaw and GitHub Copilot can be hijacked to create new massive botnets

Researchers find nine of the most popular AI platforms are susceptible to a new attack that exploits hallucinations to set up ...
The Hacker News

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

TuxBot v3 Evolution contains raw LLM reasoning, 1,496 Telnet credentials, and exploits for over 30 IoT device families in a ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...
The Next Web

A Chinese state-linked botnet has grown to 1,500 hacked routers and is mapping vulnerable targets within hours of disclosure

China-linked JDY botnet grew from 650 to 1,500+ hacked SOHO devices. It scans for new vulnerabilities within hours and feeds targeting data to state hackers. A covert botnet linked to Chinese ...
Ars Technica

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
HotHardware

17 Million Devices Just Got Rescued From A Massive Global Botnet

Law enforcement in the Netherlands has dismantled a massive global botnet that hijacked more than 17 million consumer devices worldwide. The coordinated strike targeted 200 command-and-control servers ...
Ars Technica

Botnet of more than 17 million devices dismantled

Authorities in the Netherlands said they dismantled a botnet that comprised more than 17 million devices and were managed by 200 servers in a joint operation by the police and the National Cyber ...
TechCrunch

CrowdStrike and Google take down botnet used by hackers to target open source software developers

CrowdStrike, working with Google and Shadowserver, a nonprofit organization that scans and monitors the internet for cyberattacks, took down a botnet that cybercriminals used to push malware and steal ...
Wall Street Journal

How to Find Out Whether Your Computer Is Part of a Botnet—and What to Do About It

WSJ’s Robert McMillan breaks down why residential proxy software is so bad, and how to check whether the malware is installed on your home network. Photo: Sean Havey The price might be right, but if ...
HotHardware

Feds Dismantle Botnets That Launched The Largest DDoS Attacks Ever Recorded

Law enforcement agencies have scored a major win against the world’s most predatory botnet operations, dismantling the infrastructure of four major networks responsible for some of the most aggressive ...
Hackaday

This Week In Security: Linux Flaws, Python Ownage, And A Botnet Shutdown

The ides of security March are upon us — Qualys reports the discovery by their threat research unit of vulnerabilities in the Linux AppArmor system used by SUSE, Debian, Ubuntu, and Kubernetes as an ...