botnet
5 live · 9 on record · last incident 2 days ago
Live5
- liveCredential stuffing campaign spoofs consumer AI agent traffic
Breaches & attacks · Exploited · since Oct 2026 (approx.)
Attackers launched a bulk credential stuffing operation disguised as a consumer AI agent, generating hundreds of thousands of sign-in page visits. The automated traffic attempted unauthorized logins using stolen credentials before failing.
AI - liveNode-RED Critical Node-RED Flaw Exploited in Attacks
Patch now · Exploited · since 3 Nov 2026
Threat actors actively exploited a critical vulnerability in Node-RED to deploy malicious payloads including Linux bots and webshells. Multiple attack attempts originated from the same IP address.
- liveVideostrong Android TV boxes Google Disrupts 1.3 Million-Device Android Botnet Linked to TV Box Maker
Breaches & attacks · Exploited · since 30 Oct 2026 · updated 4 Nov 2026
Google successfully disrupted a 1.3 million-device Android botnet operating primarily on TV set-top boxes. Investigators attribute the botnet to device maker Videostrong, which allegedly integrated backdoors to sell unauthorized network access.
- liveXCPE malware Google disrupts XCPE botnet and bans Videostrong Technology
Breaches & attacks · Real loss · since 2 Nov 2026
Google dismantled the infrastructure of the XCPE botnet, which infected over 1.3 million Android TV set-top boxes via embedded firmware backdoors. The hardware manufacturer allegedly sold unauthorized access to criminal affiliates.
- liveXCPE backdoor XCPE botnet dismantled after infecting 1.3 million set-top boxes
Breaches & attacks · Real loss · since 25 Oct 2026 · updated 3 Nov 2026
Google and industry partners dismantled the XCPE backdoor which infected over 1.3 million set-top boxes. The OEM Videostrong Technology operated the botnet for financial gain by loading ad-fraud modules.
Do:Disconnect or replace affected compromised set-top boxes.
Earlier4
- closedAmadey malware Australian Signals Directorate Disrupts Amadey Malware Infrastructure
Breaches & attacks · Exploited · since 27 Oct 2026
- closedMicrosoft cloud services Microsoft Blocks Millions of Bot Signups Amid AI Fraud Surge
Breaches & attacks · Exploited · since 16 Apr 2025
AI - closedPalo Alto Networks DGA Detector CNN-Based Botnet DGA Detector Bypassed via Domain Mutation
Research · since 31 Mar 2023
AI - closedDGA detector Botnet DGA Detection Evasion Using Domain Mutation
Research · since 1 Jan 2020
AI