DNS Hijacking via Sogou IME: DarkVigil Backdoor Served Over HTTP
SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.
CVE-2026-120422: in-depth technical breakdown of this vulnerability, its exploitation in the wild, botnet adoption potential, and practical steps to protect your infrastructure.
SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.