🚨 U.S. Government Takes Control of Chinese State-Sponsored Botnet — How GreyNoise Was Already Tracking Key Vulnerabilities 👀🔐

Today's takedown of a 260,000-devices-strong botnet run by Chinese state-sponsored hackers marks a major milestone in cybersecurity. GreyNoise was ahead of the curve, providing critical insights into many of the vulnerabilities used to enlist devices into this global botnet.

Our team has been monitoring 44 of the 66 CVEs identified in the U.S. government’s advisory (see image below), including some of the most exploited vulnerabilities used in this botnet. This proactive monitoring gives our customers a head start, helping them mitigate threats before they escalate into full-blown incidents.

Of those 44 CVEs, GreyNoise observed malicious traffic targeting 29 vulnerabilities. The QNAP NAS Improper Authorization Vulnerability (CVE-2021-28799) saw the highest volume of attempted discovery or exploitation traffic. Attackers used this vulnerability to compromise devices, enlisting them into the botnet that has now been taken down by U.S. authorities.

With GreyNoise, organizations stay ahead of emerging threats, receiving the intelligence they need before vulnerabilities are weaponized on a massive scale. Learn more about how we can help protect your organization from the most dangerous exploits.

#botnet #fbi #nsa #cnmf #threatintelligence #cybersecurity

[#CyberLand News] Weekly #Threats and #Malware

#threatintel
> #DarkPower #ransowmare
> #RedLine #malware
> #CNMF #cyberoperation
> #BlackGuard #stealer
> #Linux & #ShellBot #malware
> #CommonMagic #malware #cyberwar

https://tribalsec.substack.com/p/cyberland-news-weekly-6-threats-and