Click here to download all references as Bib-File.
| 2021-08-30 ⋅ 360 netlab ⋅ The Mostly Dead Mozi and Its’ Lingering Bots Mozi |
| 2021-07-01 ⋅ 360 netlab ⋅ Mirai_ptea Botnet is Exploiting Undisclosed KGUARD DVR Vulnerability Mirai |
| 2021-05-27 ⋅ 360 netlab ⋅ Analysis report of the Facefish rootkit Facefish |
| 2021-05-06 ⋅ 360 netlab ⋅ RotaJakiro, the Linux version of the OceanLotus RotaJakiro |
| 2021-04-29 ⋅ 360 netlab ⋅ Threat Alert: New update from Sysrv-hello, now infecting victims‘ webpages to push malicious exe to end users |
| 2021-04-28 ⋅ 360 netlab ⋅ RotaJakiro: A long live secret backdoor with 0 VT detection RotaJakiro |
| 2021-03-18 ⋅ 360 netlab ⋅ Necro upgrades again, using Tor + dynamic domain DGA and aiming at both Windows & Linux N3Cr0m0rPh |
| 2021-03-12 ⋅ 360 netlab ⋅ New Threat: ZHtrap botnet implements honeypot to facilitate finding more victims ZHtrap |
| 2021-03-09 ⋅ 360 netlab ⋅ Threat Alert: z0Miner Is Spreading quickly by Exploiting ElasticSearch and Jenkins Vulnerabilities |
| 2021-03-05 ⋅ 360 netlab ⋅ QNAP NAS users, make sure you check your system QNAPCrypt |
| 2021-03-04 ⋅ 360 netlab ⋅ Gafgtyt_tor and Necro are on the move again Bashlite N3Cr0m0rPh |
| 2021-03-03 ⋅ 360 netlab ⋅ Fbot is now riding the traffic and transportation smart devices FBot |
| 2021-02-10 ⋅ 360 netlab ⋅ Rinfo Is Making A Comeback and Is Scanning and Mining in Full Speed |
| 2021-02-01 ⋅ 360netlab ⋅ DDG: A Mining Botnet Aiming at Database Servers DDG |
| 2021-01-21 ⋅ Netlab ⋅ Necro在频繁升级，新版本开始使用PyInstaller和DGA N3Cr0m0rPh |
| 2020-12-03 ⋅ 360 netlab ⋅ Another LILIN DVR 0-day being used to spread Mirai Mirai |
| 2020-11-24 ⋅ 360 netlab ⋅ Blackrota, a heavily obfuscated backdoor written in Go Blackrota |
| 2020-11-20 ⋅ 360 netlab ⋅ MooBot on the run using another 0 day targeting UNIX CCTV DVR MooBot |
| 2020-11-20 ⋅ 360 netlab ⋅ Blackrota, a highly obfuscated backdoor developed by Go Cobalt Strike |
| 2020-11-13 ⋅ Netlab ⋅ Quick update on the Linux.Ngioweb botnet, now it is going after IoT devices Ngioweb |