Criminal Botnet Weaponization

10 reports

Criminal Botnet Weaponization China Iran North Korea [+10] Russia Gulf States Thailand United States China Cyber Espionage Living-off-the-Land Exploitation Advanced Persistent Threat Operations AI-Enhanced Social Engineering Critical Infrastructure Mapping

Cyfirma July 31 Report Documents Lazarus Botnet and Multi-State Cyber Escalation

Weekly threat intelligence identifies Chinese APT Thai government targeting and Iranian infrastructure operations.
Criminal Botnet Weaponization North Korea South Korea United States [+5] North Korea Cyber Espionage Malware Distribution Cryptocurrency Theft Advanced Persistent Threat Operations

Cyfirma July 2026 Intel Report Documents Lazarus Group Botnet and Multi-Vector Escalation

North Korea's Famous Chollima deploys DLL injection and direct IP C2 in latest documented attack wave.
Criminal Botnet Weaponization Unknown European Union United States [+4] Other Persistent Network Infiltration AI Profile Generation IoT Botnet Infrastructure

ThreatsDay Bulletin Documents Smart TV Proxyware and AI Crime Forum Escalation

Weekly threat intelligence roundup surfaces state-adjacent cyber infrastructure and criminal forum expansion targeting elections.
Criminal Botnet Weaponization Nigeria United Kingdom Nigeria [+5] United Kingdom Other Cyber Espionage Counterintelligence Operations Democratic Institution Protection

Nigeria and UK Formalize Counter-Cybercrime and Terrorism Financing Partnership

Bilateral security cooperation agreement targets cross-border cybercrime networks and illicit financial flows.
Criminal Botnet Weaponization Various Global Other [+3] Infrastructure Attacks DDoS Attacks IoT Botnet Infrastructure

International Operation Dismantles Massive IoT Botnet Network Targeting Critical Infrastructure

Authorities seize Aisuru, Kimwolf, JackSkid and Mossad botnets controlling over three million compromised devices
Criminal Botnet Weaponization China Guam United States [+4] China Infrastructure Attacks Remote Device Control Advanced Persistent Threat Operations

FBI Disrupts Chinese Volt Typhoon Botnet Targeting Critical Infrastructure Networks

Court-authorized operation removes malware from compromised routers used in multi-year espionage campaign
Criminal Botnet Weaponization Russia Ukraine Russia [+3] Cyber Espionage Malware Distribution Infrastructure Hijacking

Russian Turla Group Hijacks Dismantled Cybercrime Infrastructure for Espionage Operations

FSB-linked hackers repurpose ANDROMEDA botnet domains to deploy targeted malware against Ukrainian entities
Criminal Botnet Weaponization Iran North Korea United States [+7] Iran Election Interference Cyber Espionage Ransomware Campaigns Cryptocurrency Theft Advanced Persistent Threat Operations Critical Infrastructure Mapping

Iran and North Korea Conduct Parallel State-Sponsored Cyber Campaigns During 2020

MOIS, IRGC-linked APT-39 and North Korean operators simultaneously targeted defense, healthcare, and cryptocurrency infrastructure in 2020.
Criminal Botnet Weaponization Russia Georgia Turkey [+5] Russia Cyber Espionage Malware Distribution Government Infiltration Persistent Network Infiltration

Russian Criminal Botnet Conducted State-Sponsored Espionage Operations Against Georgia and Turkey

GameOver Zeus network searched for government documents and intelligence personnel data alongside financial crimes
Criminal Botnet Weaponization Russia Estonia Russia [+8] Cyber Espionage Infrastructure Attacks Financial Cyber Theft DDoS Attacks Diplomatic Coercion Government Destabilization Website Defacement Coordinated Cyber Warfare

NATO Pledges Cyber Defense Response Following Russian Attacks on Estonia

Alliance defense ministers commit to action by autumn 2007 after unprecedented digital assault
Select an article to read