Botnet Encyclopedia

Get in-depth analyses of attack campaigns captured by Guardicore Global Sensors Network (GGSN).
Learn about each botnet’s scope, its associated indicators of compromise (IOCs), and the attack flow.

MoneroSsh

911

A long-running campaign in which a Mirai-variant named “Sora” is deployed. The malware scans for additional victims over Telnet port 23.

GhOul

This Telnet DDoS campaign is targeting SSH servers and has been active since February 2020.

PLEASE_READ_ME_VVV

This campaign, unlike many others, is not a cryptomining botnet. Here, the attackers compromise victim machines using MySQL brute force

Smominru

The Smominru botnet and its variants MyKings and Hexmen managed to infect thousands of MS-SQL machines on a daily basis

PLEASE_READ_ME

PLEASE_READ_ME_VVV is a mass-scale ransom attack, in which the attackers choose to leave the ransom note within MySQL database tables.

Stop Ransomware Attacks

Rethink Your Firewall

Zero Trust

Cloud Security

Segmentation Initiatives

Compliance

Industries

Botnet Encyclopedia

Get in-depth analyses of attack campaigns captured by Guardicore Global Sensors Network (GGSN).
Learn about each botnet’s scope, its associated indicators of compromise (IOCs), and the attack flow.

MoneroSsh

MoneroSsh

911

911

GhOul

GhOul

PLEASE_READ_ME_VVV

PLEASE_READ_ME_VVV

Smominru

Smominru

PLEASE_READ_ME

PLEASE_READ_ME

We strive for cooperation with the cyber threat intelligence community and welcome any contribution, question and suggestion.

Blog

© 2022 Guardicore

Stop Ransomware Attacks

Rethink Your Firewall

Zero Trust

Cloud Security

Segmentation Initiatives

Compliance

Industries

Botnet Encyclopedia

Get in-depth analyses of attack campaigns captured by Guardicore Global Sensors Network (GGSN). Learn about each botnet’s scope, its associated indicators of compromise (IOCs), and the attack flow.

MoneroSsh

MoneroSsh

911

911

GhOul

GhOul

PLEASE_READ_ME_VVV

PLEASE_READ_ME_VVV

Smominru

Smominru

PLEASE_READ_ME

PLEASE_READ_ME

We strive for cooperation with the cyber threat intelligence community and welcome any contribution, question and suggestion.

Blog

© 2022 Guardicore

Get in-depth analyses of attack campaigns captured by Guardicore Global Sensors Network (GGSN).
Learn about each botnet’s scope, its associated indicators of compromise (IOCs), and the attack flow.