Home / Blog / #botnet

#botnet

Explore expert botnet analysis, DDoS attack trends, and mitigation strategies from the Mēris team — specialists in large-scale distributed denial-of-service operations and botnet-driven threats.

Barracuda ESG Vulnerability Chain Gives Root — and Botnets Nodes

Barracuda patched two ESG flaws that chain into root. We break down why compromised mail gateways make ideal botnet nodes for udp and http flood attacks.

SonicWall GMS: Two 9.1-Grade Holes, Zero Patches Coming

SonicWall won't patch two GMS flaws, including a 9.1 unauthenticated file read. Why EoL management boxes are a gift to every botnet and DDoS-for-hire fleet.

APT29 Watering Hole: Analytics Script Turned Mobile Exploit Loader

APT29 hijacked the Plerdy analytics script in a massive watering hole campaign serving iOS and Android exploits. We dissect the supply chain lesson.

DNS Hijacking via Sogou IME: DarkVigil Backdoor Served Over HTTP

SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.

XCPE Botnet Takedown: 1.3M TV Boxes Still Infected

Google sinkholed the XCPE botnet's C2, but 1.3 million backdoored TV boxes remain infected, and their proxy revenue model makes them ideal DDoS assets.

Siemens IoT2050 Vulnerability: A CVSS 10.0 Botnet Recruiter

CVE-2026-58115 turns Siemens IoT2050 gateways into persistent botnet relays via an unauthenticated Node-RED interface. Here's why edge devices recruit so well.