Botnet Encyclopedia Archive - Guardicore

Botnet Encyclopedia

Get in-depth analyses of attack campaigns captured by Guardicore Global Sensors Network (GGSN).
Learn about each botnet’s scope, its associated indicators of compromise (IOCs), and the attack flow.

MoneroSsh

MoneroSsh

911

911

A long-running campaign in which a Mirai-variant named “Sora” is deployed. The malware scans for additional victims over Telnet port 23.

GhOul

GhOul

This Telnet DDoS campaign is targeting SSH servers and has been active since February 2020.

PLEASE_READ_ME_VVV

PLEASE_READ_ME_VVV

This campaign, unlike many others, is not a cryptomining botnet. Here, the attackers compromise victim machines using MySQL brute force

Smominru

Smominru

The Smominru botnet and its variants MyKings and Hexmen managed to infect thousands of MS-SQL machines on a daily basis

PLEASE_READ_ME

PLEASE_READ_ME

PLEASE_READ_ME_VVV is a mass-scale ransom attack, in which the attackers choose to leave the ransom note within MySQL database tables.

We strive for cooperation with the cyber threat intelligence community and welcome any contribution, question and suggestion.

img.wp-smiley,img.emoji{display:inline !important;border:none !important;box-shadow:none !important;height:1em !important;width:1em !important;margin:0 .07em !important;vertical-align:-.1em !important;background:none !important;padding:0 !important;}@font-face{font-family:eicons;src:url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/source/rev-7d61d45/wp-content/plugins/elementor/assets/lib/eicons/fonts/487fb88d73d41a26c611d95e94cc95a3.eicons.eot");src:url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/source/rev-7d61d45/wp-content/plugins/elementor/assets/lib/eicons/fonts/487fb88d73d41a26c611d95e94cc95a3.eicons.eot#iefix") format("embedded-opentype"),url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/source/rev-7d61d45/wp-content/plugins/elementor/assets/lib/eicons/fonts/487fb88d73d41a26c611d95e94cc95a3.eicons.woff2") format("woff2"),url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/source/rev-7d61d45/wp-content/plugins/elementor/assets/lib/eicons/fonts/487fb88d73d41a26c611d95e94cc95a3.eicons.woff") format("woff"),url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/source/rev-7d61d45/wp-content/plugins/elementor/assets/lib/eicons/fonts/487fb88d73d41a26c611d95e94cc95a3.eicons.ttf") format("truetype"),url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/optimized/rev-7d61d45/wp-content/plugins/elementor/assets/lib/eicons/fonts/487fb88d73d41a26c611d95e94cc95a3.eicons.svg#eicon") format("svg");font-weight:400;font-style:normal;font-display:swap;}.comeet-outer-wrapper{padding:50px;}.comeet-list .comeet-positions-list .positions-row{display:inline-flex;}@media only screen and (max-width: 767px){.comeet-list .comeet-positions-list .positions-row{display:unset;}}@media only screen and (max-width: 767px){.comeet-list .comeet-positions-list .comeet-position-holder{width:100%;}}.comeet-list .comeet-positions-list .comeet-position-holder{display:flex;margin:1%;}.comeet-positions-list .comeet-position-holder a.comeet-position{width:100%;float:left;margin-bottom:3%;padding:20px;box-sizing:border-box;border:1px solid #d5d5d5;min-height:75px;border-radius:2px;box-shadow:0 1px 1px rgba(0,0,0,10%);}.comeet-positions-list .comeet-position-holder a.comeet-position:hover{box-shadow:0 .5rem 1rem rgba(0,0,0,.15) !important;}.comeet-position .comeet-position-name .position-location{display:block;color:#595969;font-size:18px;}.comeet-position .comeet-position-name .position-location:before{width:20px;height:30px;display:inline-block;content:"";background:url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/optimized/rev-7d61d45/wp-content/uploads/location-icon-purple-croped-2.png") no-repeat left bottom;background-size:17px 30px;}.comeet-position .comeet-position-name .position-name{display:block;color:#595969;font-size:1.3em;font-weight:bold;}.comeet-position .comeet-position-meta .position-department{display:block;color:#595969;font-size:1.2em;margin-bottom:20px;}.comeet-position .comeet-position-meta .position-description{display:block;color:#595969;font-size:18px;}.comeet-positions-list .comeet-position-holder a.comeet-position span.purpleBtn{background:#7400ef;color:#fff !important;border-color:#7400ef;padding:5px 30px;font-weight:normal;display:inline-block;margin-top:20px;font-size:16px;}.wp-block-code{background-color:#000;color:#f6f23c;}.fa-angle-left:before{content:url("https://cdn-bjkoa.nitrocdn.com/mlIhCHRTfPubLxJNymRbEvENjulcCLLH/assets/static/optimized/rev-7d61d45/wp-content/uploads/Vector-5.svg") !important;}p a:hover{color:#370a6f !important;}.elementor-text-editor li a:hover{color:#370a6f !important;}.mec-wrap,.mec-wrap div:not([class^="elementor-"]),.lity-container,.mec-wrap h1,.mec-wrap h2,.mec-wrap h3,.mec-wrap h4,.mec-wrap h5,.mec-wrap h6,.entry-content .mec-wrap h1,.entry-content .mec-wrap h2,.entry-content .mec-wrap h3,.entry-content .mec-wrap h4,.entry-content .mec-wrap h5,.entry-content .mec-wrap h6,.mec-wrap .mec-totalcal-box input[type="submit"],.mec-wrap .mec-totalcal-box .mec-totalcal-view span,.mec-agenda-event-title a,.lity-content .mec-events-meta-group-booking select,.lity-content .mec-book-ticket-variation h5,.lity-content .mec-events-meta-group-booking input[type="number"],.lity-content .mec-events-meta-group-booking input[type="text"],.lity-content .mec-events-meta-group-booking input[type="email"],.mec-organizer-item a{font-family:"Montserrat",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;}.mec-event-grid-minimal .mec-modal-booking-button:hover,.mec-events-timeline-wrap .mec-organizer-item a,.mec-events-timeline-wrap .mec-organizer-item:after,.mec-events-timeline-wrap .mec-shortcode-organizers i,.mec-timeline-event .mec-modal-booking-button,.mec-wrap .mec-map-lightbox-wp.mec-event-list-classic .mec-event-date,.mec-timetable-t2-col .mec-modal-booking-button:hover,.mec-event-container-classic .mec-modal-booking-button:hover,.mec-calendar-events-side .mec-modal-booking-button:hover,.mec-event-grid-yearly .mec-modal-booking-button,.mec-events-agenda .mec-modal-booking-button,.mec-event-grid-simple .mec-modal-booking-button,.mec-event-list-minimal .mec-modal-booking-button:hover,.mec-timeline-month-divider,.mec-wrap.colorskin-custom .mec-totalcal-box .mec-totalcal-view span:hover,.mec-wrap.colorskin-custom .mec-calendar.mec-event-calendar-classic .mec-selected-day,.mec-wrap.colorskin-custom .mec-color,.mec-wrap.colorskin-custom .mec-event-sharing-wrap .mec-event-sharing > li:hover a,.mec-wrap.colorskin-custom .mec-color-hover:hover,.mec-wrap.colorskin-custom .mec-color-before *:before,.mec-wrap.colorskin-custom .mec-widget .mec-event-grid-classic.owl-carousel .owl-nav i,.mec-wrap.colorskin-custom .mec-event-list-classic a.magicmore:hover,.mec-wrap.colorskin-custom .mec-event-grid-simple:hover .mec-event-title,.mec-wrap.colorskin-custom .mec-single-event .mec-event-meta dd.mec-events-event-categories:before,.mec-wrap.colorskin-custom .mec-single-event-date:before,.mec-wrap.colorskin-custom .mec-single-event-time:before,.mec-wrap.colorskin-custom .mec-events-meta-group.mec-events-meta-group-venue:before,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-side .mec-previous-month i,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-side .mec-next-month:hover,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-side .mec-previous-month:hover,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-side .mec-next-month:hover,.mec-wrap.colorskin-custom .mec-calendar.mec-event-calendar-classic dt.mec-selected-day:hover,.mec-wrap.colorskin-custom .mec-infowindow-wp h5 a:hover,.colorskin-custom .mec-events-meta-group-countdown .mec-end-counts h3,.mec-calendar .mec-calendar-side .mec-next-month i,.mec-wrap .mec-totalcal-box i,.mec-calendar .mec-event-article .mec-event-title a:hover,.mec-attendees-list-details .mec-attendee-profile-link a:hover,.mec-wrap.colorskin-custom .mec-next-event-details li i,.mec-next-event-details i:before,.mec-marker-infowindow-wp .mec-marker-infowindow-count,.mec-next-event-details a,.mec-wrap.colorskin-custom .mec-events-masonry-cats a.mec-masonry-cat-selected,.lity .mec-color,.lity .mec-color-before :before,.lity .mec-color-hover:hover,.lity .mec-wrap .mec-color,.lity .mec-wrap .mec-color-before :before,.lity .mec-wrap .mec-color-hover:hover,.leaflet-popup-content .mec-color,.leaflet-popup-content .mec-color-before :before,.leaflet-popup-content .mec-color-hover:hover,.leaflet-popup-content .mec-wrap .mec-color,.leaflet-popup-content .mec-wrap .mec-color-before :before,.leaflet-popup-content .mec-wrap .mec-color-hover:hover,.mec-calendar.mec-calendar-daily .mec-calendar-d-table .mec-daily-view-day.mec-daily-view-day-active.mec-color,.mec-map-boxshow div .mec-map-view-event-detail.mec-event-detail i,.mec-map-boxshow div .mec-map-view-event-detail.mec-event-detail:hover,.mec-map-boxshow .mec-color,.mec-map-boxshow .mec-color-before :before,.mec-map-boxshow .mec-color-hover:hover,.mec-map-boxshow .mec-wrap .mec-color,.mec-map-boxshow .mec-wrap .mec-color-before :before,.mec-map-boxshow .mec-wrap .mec-color-hover:hover,.mec-choosen-time-message,.mec-booking-calendar-month-navigation .mec-next-month:hover,.mec-booking-calendar-month-navigation .mec-previous-month:hover,.mec-yearly-view-wrap .mec-agenda-event-title a:hover,.mec-yearly-view-wrap .mec-yearly-title-sec .mec-next-year i,.mec-yearly-view-wrap .mec-yearly-title-sec .mec-previous-year i,.mec-yearly-view-wrap .mec-yearly-title-sec .mec-next-year:hover,.mec-yearly-view-wrap .mec-yearly-title-sec .mec-previous-year:hover,.mec-av-spot .mec-av-spot-head .mec-av-spot-box span,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-side .mec-previous-month:hover .mec-load-month-link,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-side .mec-next-month:hover .mec-load-month-link,.mec-yearly-view-wrap .mec-yearly-title-sec .mec-previous-year:hover .mec-load-month-link,.mec-yearly-view-wrap .mec-yearly-title-sec .mec-next-year:hover .mec-load-month-link,.mec-skin-list-events-container .mec-data-fields-tooltip .mec-data-fields-tooltip-box ul .mec-event-data-field-item a{color:#7400ef;}.mec-skin-carousel-container .mec-event-footer-carousel-type3 .mec-modal-booking-button:hover,.mec-wrap.colorskin-custom .mec-event-sharing .mec-event-share:hover .event-sharing-icon,.mec-wrap.colorskin-custom .mec-event-grid-clean .mec-event-date,.mec-wrap.colorskin-custom .mec-event-list-modern .mec-event-sharing > li:hover a i,.mec-wrap.colorskin-custom .mec-event-list-modern .mec-event-sharing .mec-event-share:hover .mec-event-sharing-icon,.mec-wrap.colorskin-custom .mec-event-list-modern .mec-event-sharing li:hover a i,.mec-wrap.colorskin-custom .mec-calendar:not(.mec-event-calendar-classic) .mec-selected-day,.mec-wrap.colorskin-custom .mec-calendar .mec-selected-day:hover,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-row dt.mec-has-event:hover,.mec-wrap.colorskin-custom .mec-calendar .mec-has-event:after,.mec-wrap.colorskin-custom .mec-bg-color,.mec-wrap.colorskin-custom .mec-bg-color-hover:hover,.colorskin-custom .mec-event-sharing-wrap:hover > li,.mec-wrap.colorskin-custom .mec-totalcal-box .mec-totalcal-view span.mec-totalcalview-selected,.mec-wrap .flip-clock-wrapper ul li a div div.inn,.mec-wrap .mec-totalcal-box .mec-totalcal-view span.mec-totalcalview-selected,.event-carousel-type1-head .mec-event-date-carousel,.mec-event-countdown-style3 .mec-event-date,#wrap .mec-wrap article.mec-event-countdown-style1,.mec-event-countdown-style1 .mec-event-countdown-part3 a.mec-event-button,.mec-wrap .mec-event-countdown-style2,.mec-map-get-direction-btn-cnt input[type="submit"],.mec-booking button,span.mec-marker-wrap,.mec-wrap.colorskin-custom .mec-timeline-events-container .mec-timeline-event-date:before,.mec-has-event-for-booking.mec-active .mec-calendar-novel-selected-day,.mec-booking-tooltip.multiple-time .mec-booking-calendar-date.mec-active,.mec-booking-tooltip.multiple-time .mec-booking-calendar-date:hover,.mec-ongoing-normal-label,.mec-calendar .mec-has-event:after{background-color:#7400ef;}.mec-booking-tooltip.multiple-time .mec-booking-calendar-date:hover,.mec-calendar-day.mec-active .mec-booking-tooltip.multiple-time .mec-booking-calendar-date.mec-active{background-color:#7400ef;}.mec-skin-carousel-container .mec-event-footer-carousel-type3 .mec-modal-booking-button:hover,.mec-timeline-month-divider,.mec-wrap.colorskin-custom .mec-single-event .mec-speakers-details ul li .mec-speaker-avatar a:hover img,.mec-wrap.colorskin-custom .mec-event-list-modern .mec-event-sharing > li:hover a i,.mec-wrap.colorskin-custom .mec-event-list-modern .mec-event-sharing .mec-event-share:hover .mec-event-sharing-icon,.mec-wrap.colorskin-custom .mec-event-list-standard .mec-month-divider span:before,.mec-wrap.colorskin-custom .mec-single-event .mec-social-single:before,.mec-wrap.colorskin-custom .mec-single-event .mec-frontbox-title:before,.mec-wrap.colorskin-custom .mec-calendar .mec-calendar-events-side .mec-table-side-day,.mec-wrap.colorskin-custom .mec-border-color,.mec-wrap.colorskin-custom .mec-border-color-hover:hover,.colorskin-custom .mec-single-event .mec-frontbox-title:before,.colorskin-custom .mec-single-event .mec-wrap-checkout h4:before,.colorskin-custom .mec-single-event .mec-events-meta-group-booking form > h4:before,.mec-wrap.colorskin-custom .mec-totalcal-box .mec-totalcal-view span.mec-totalcalview-selected,.mec-wrap .mec-totalcal-box .mec-totalcal-view span.mec-totalcalview-selected,.event-carousel-type1-head .mec-event-date-carousel:after,.mec-wrap.colorskin-custom .mec-events-masonry-cats a.mec-masonry-cat-selected,.mec-marker-infowindow-wp .mec-marker-infowindow-count,.mec-wrap.colorskin-custom .mec-events-masonry-cats a:hover,.mec-has-event-for-booking .mec-calendar-novel-selected-day,.mec-booking-tooltip.multiple-time .mec-booking-calendar-date.mec-active,.mec-booking-tooltip.multiple-time .mec-booking-calendar-date:hover,.mec-virtual-event-history h3:before,.mec-booking-tooltip.multiple-time .mec-booking-calendar-date:hover,.mec-calendar-day.mec-active .mec-booking-tooltip.multiple-time .mec-booking-calendar-date.mec-active{border-color:#7400ef;}.mec-wrap.colorskin-custom .mec-event-countdown-style3 .mec-event-date:after,.mec-wrap.colorskin-custom .mec-month-divider span:before,.mec-calendar.mec-event-container-simple dl dt.mec-selected-day,.mec-calendar.mec-event-container-simple dl dt.mec-selected-day:hover{border-bottom-color:#7400ef;}.mec-wrap.colorskin-custom article.mec-event-countdown-style1 .mec-event-countdown-part2:after{border-color:transparent transparent transparent #7400ef;}.mec-wrap.colorskin-custom .mec-box-shadow-color{box-shadow:0 4px 22px -7px #7400ef;}.mec-events-timeline-wrap .mec-shortcode-organizers,.mec-timeline-event .mec-modal-booking-button,.mec-events-timeline-wrap:before,.mec-wrap.colorskin-custom .mec-timeline-event-local-time,.mec-wrap.colorskin-custom .mec-timeline-event-time,.mec-wrap.colorskin-custom .mec-timeline-event-location,.mec-choosen-time-message{background:rgba(116,0,239,.11);}.mec-wrap.colorskin-custom .mec-timeline-events-container .mec-timeline-event-date:after{background:rgba(116,0,239,.3);}.mec-wrap h1 a,.mec-wrap h2 a,.mec-wrap h3 a,.mec-wrap h4 a,.mec-wrap h5 a,.mec-wrap h6 a,.entry-content .mec-wrap h1 a,.entry-content .mec-wrap h2 a,.entry-content .mec-wrap h3 a,.entry-content .mec-wrap h4 a,.entry-content .mec-wrap h5 a,.entry-content .mec-wrap h6 a{color:#595969 !important;}.mec-wrap.colorskin-custom h1 a:hover,.mec-wrap.colorskin-custom h2 a:hover,.mec-wrap.colorskin-custom h3 a:hover,.mec-wrap.colorskin-custom h4 a:hover,.mec-wrap.colorskin-custom h5 a:hover,.mec-wrap.colorskin-custom h6 a:hover,.entry-content .mec-wrap.colorskin-custom h1 a:hover,.entry-content .mec-wrap.colorskin-custom h2 a:hover,.entry-content .mec-wrap.colorskin-custom h3 a:hover,.entry-content .mec-wrap.colorskin-custom h4 a:hover,.entry-content .mec-wrap.colorskin-custom h5 a:hover,.entry-content .mec-wrap.colorskin-custom h6 a:hover{color:#7400ef !important;}.mec-wrap.colorskin-custom .mec-event-description{color:#131128;}