Microsoft

ACR Stealer: Two observed intrusion chains amid increased threat activity

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Now, even Russia’s most elite hackers are using Clickfix to infect devices

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

Google Gemini CLI abused as a hacking agent, malware botnet operator

A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...
Opinion
Free Software FoundationOpinion

How the FSF sysadmins block botnets with reaction

I have written about the FSF facing DDoS attacks several times, including on doing our part to clean up the internet and on Uptime Kuma, as well as "Defending Savannah from DDoS attacks". But I ...
Neowin

FBI seizes NetNut domain with Google's help after links found to Popa botnet

The Federal Bureau of Investigation (FBI) just took serious action against hundreds of domains associated with a residential proxy service called NetNut, which is operated by Israeli company Alarum ...
HotHardware

17 Million Devices Just Got Rescued From A Massive Global Botnet

Law enforcement in the Netherlands has dismantled a massive global botnet that hijacked more than 17 million consumer devices worldwide. The coordinated strike targeted 200 command-and-control servers ...
Ars Technica

Botnet of more than 17 million devices dismantled

Authorities in the Netherlands said they dismantled a botnet that comprised more than 17 million devices and were managed by 200 servers in a joint operation by the police and the National Cyber ...
TechCrunch

CrowdStrike and Google take down botnet used by hackers to target open source software developers

CrowdStrike, working with Google and Shadowserver, a nonprofit organization that scans and monitors the internet for cyberattacks, took down a botnet that cybercriminals used to push malware and steal ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
ConsumerAffairs

Has your computer been hijacked into a bot network?

One of the telltale signs that your computer has been compromised is unexplained slowdowns and constant background activity — even when you’re not using your computer. Additionally, look out for ...
Wall Street Journal

How to Find Out Whether Your Computer Is Part of a Botnet—and What to Do About It

WSJ’s Robert McMillan breaks down why residential proxy software is so bad, and how to check whether the malware is installed on your home network. Photo: Sean Havey The price might be right, but if ...