What is Mēris Botnet? The story of the record-breaking DDoS botnet★ pinned
How a botnet named after the Latvian word for “plague” set world records with 21.8 million requests per second and became the most feared DDoS-for-Hire service on the market.
Notes on DDoS-for-Hire, stress testing, botnets and the darker side of the internet — from the team behind the Mēris botnet.
How a botnet named after the Latvian word for “plague” set world records with 21.8 million requests per second and became the most feared DDoS-for-Hire service on the market.
A practical checklist: proofs of power, verified sellers, escrow deals, red flags and the most common scam schemes on the DDoS market.
Barracuda patched two ESG flaws that chain into root. We break down why compromised mail gateways make ideal botnet nodes for udp and http flood attacks.
SonicWall won't patch two GMS flaws, including a 9.1 unauthenticated file read. Why EoL management boxes are a gift to every botnet and DDoS-for-hire fleet.
APT29 hijacked the Plerdy analytics script in a massive watering hole campaign serving iOS and Android exploits. We dissect the supply chain lesson.
SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.
UAM, JS Challenge, Managed Challenge, BFM, Turnstile — why Cloudflare stops most stressers, and why it does not stop us.
Realistic ways to get BTC/XMR with card or PayPal without identity checks, plus how to break the trail with a Monero swap before paying.