Windows 10: Botnet

Ford12 · Apr 15, 2023

HiA computer with Windows 10 that had not been on my network prior, had nod32 antivirus installed but some of the features were turned off like the firewall and the botnet services. As soon as I turned them on I got a message from Nod32 blocking an event that was a TCP port scanning attack and the rule/worm name is Win32/botnet generic. The target IP says its the IP address of the infected pc, which makes sense and there was a 5 digit port number after the IP address which Nod32 blocked. But the source IP says the IP address of my router I had connected the computer to via the wifi. None of th

:)

jerrypc1 · Apr 15, 2023

Botnet

good read:

You · Apr 15, 2023

Windows 10 Botnet?

And how is this a botnet again? Lol.

Brink · Apr 15, 2023

XBash malware combines ransomware, coinminer, botnet, & worm features

New malware strain has been discovered in the wild that combines features from four types of malware categories --ransomware, coinminers, botnets, and worms-- to create a dangerous cocktail that has been wreaking havoc among Linux and Windows servers.

Named XBash, this new malware strain is the work of a well-known criminal group previously identified under the codenames of Iron [1, 2] and Rocke, and which has been extremely active in the past two years.

Iron has been tied to ransomware distribution campaigns, but also to a massive crypto-mining operation. Cisco Talos has called this group "the champion of Monero miners," and has hinted the group may be based in China.

Until now, the Iron group has focused on one operation at a time, using specific malware for specific tasks. It deployed ransomware in 2017 and early 2018, and then switched to spreading a cryptocurrency miner (coinminer) in 2018.

But Palo Alto Networks researchers say the group has now rolled out the new XBash malware strain that is a combination of all their previous tactics, rolling a botnet-like structure together with coinminer and ransomware functionality, all into one...
Click to expand...

Read more:

New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo | ZDNet

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows - Palo Alto Networks Blog

Windows 10: Botnet

Botnet

Botnet

Botnet

Botnet - Similar Threads - Botnet

How to remove botnet

How to remove botnet

Possibly a new way to have a botnet spun up and going?

Possibly a new way to have a botnet spun up and going?

XR Host Booter DDoSer 1k Botnet 2010

Meris DDoS botnet

Meris DDoS botnet

Windows-11-22h2-22621675-lite-by-den-x64-2022-BOTN ET DANGER VERSION

Windows-11-22h2-22621675-lite-by-den-x64-2022-BOTN ET DANGER VERSION