Home / Blog / #cve-2026-120422

#cve-2026-120422

CVE-2026-120422: in-depth technical breakdown of this vulnerability, its exploitation in the wild, botnet adoption potential, and practical steps to protect your infrastructure.

DNS Hijacking via Sogou IME: DarkVigil Backdoor Served Over HTTP

SlippyNunchucks hijacked Sogou Input Method DNS requests over plaintext HTTP to drop the DarkVigil backdoor. Our botnet team's take on this classic MITM vector.