tldr - powered by Generative AI
TheMoon Botnet resurfaces to exploit end-of-life devices for criminal proxy services, posing a significant cybersecurity threat.
- End-of-life appliances are targeted to create botnets due to security vulnerabilities.
- The Faceless proxy service, powered by TheMoon Botnet, offers anonymity to cybercriminals for a low cost.
- Over 40,000 bots from 88 countries were observed in the botnet in early 2024.
- The proxy service is used by malware operators to obfuscate their IP addresses and carry out malicious activities.
- More than 80% of infected devices target the financial sector for password spraying and data exfiltration.
Tags:
BotNet
proxy service
malware
end-of-life devices