Login

Recent searches

No recent searches

Search options

Not available on mastodon.xyz.
mastodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance, open to everyone, but mainly English and French speaking.

Administered by:

Server stats:

815
active users

mastodon.xyz: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.4

#botnets

0 posts0 participants0 posts today
Public
Schneier on Security RSS

AI Data Poisoning

Cloudflare has a new feature—available to free users as well—that uses AI to generate random pages to feed to AI... schneier.com/blog/archives/202

Schneier on Security · AI Data Poisoning - Schneier on SecurityCloudflare has a new feature—available to free users as well—that uses AI to generate random pages to feed to AI web crawlers: Instead of simply blocking bots, Cloudflare’s new system lures them into a “maze” of realistic-looking but irrelevant pages, wasting the crawler’s computing resources. The approach is a notable shift from the standard block-and-defend strategy used by most website protection services. Cloudflare says blocking bots sometimes backfires because it alerts the crawler’s operators that they’ve been detected. “When we detect unauthorized crawling, rather than blocking the request, we will link to a series of AI-generated pages that are convincing enough to entice a crawler to traverse them,” writes Cloudflare. “But while real looking, this content is not actually the content of the site we are protecting, so the crawler wastes time and resources.”...
#Uncategorized#spoofing#botnets
Public
Schneier on Security RSS

TP-Link Router Botnet

There is a new botnet that is infecting TP-Link routers:
The botnet can lead to comma... schneier.com/blog/archives/202

Schneier on Security · TP-Link Router Botnet - Schneier on SecurityThere is a new botnet that is infecting TP-Link routers: The botnet can lead to command injection which then makes remote code execution (RCE) possible so that the malware can spread itself across the internet automatically. This high severity security flaw (tracked as CVE-2023-1389) has also been used to spread other malware families as far back as April 2023 when it was used in the Mirai botnet malware attacks. The flaw also linked to the Condi and AndroxGh0st malware attacks. […] Of the thousands of infected devices, the majority of them are concentrated in Brazil, Poland, the United Kingdom, Bulgaria and Turkey; with the botnet targeting manufacturing, medical/healthcare, services and technology organizations in the United States, Australia, China and Mexico...
#Uncategorized#botnets#malware
Continued thread
Public *
Peter N. M. Hansteen

More data points - today's is

Oct 6 02:03:53 skapet sshd-session[76897]: Failed password for invalid user Can't open ikk from 2a02:4780:10:42bf::1 port 43964 ssh2

More likely than not a variant of spamto database gone awol like back in the day nxdomain.no/~peter/so_somebody (prettified, tracked bsdly.blogspot.com/2016/12/so-) but still hilarious

nxdomain.noSo somebody is throwing HTML at your sshd. What to do?
#sshgropers#passwordgroping#bruteforce
Public
Miguel Afonso Caetano

#AI #GenerativeAI #AITraining #CyberSecurity #Botnets #WebScraping: "In the race to build the world's most advanced AI, tech companies have fanned out across the web, releasing botnets like a plague of digital locusts to scour sites for anything they can use to fuel their voracious models.

It's often high quality training data they're after, but also other information that may help AI models understand the world. The race is on to collect as much information as possible before it runs out, or the rules change on what's acceptable.

One study estimated that the world's supply of usable AI training data could be depleted by 2032. The entire online corpus of recorded human experience may soon be inadequate to keep ChatGPT up to date.

A resource like the Game UI Database, where a human has already done the painstaking labor of cleaning and categorizing images, must have looked like an all-you-can-eat-buffet.

For small website owners with limited resources, the costs of playing host to swarm of hungry bots can present a significant burden."

businessinsider.com/openai-ant

Insider · OpenAI and Anthropic AI bots cause havoc and raise costs for websitesBy Darius Rafieyan
Public
Miguel Afonso Caetano

#CyberSecurity #FBI #Botnets #China #IoT #StateHacking: "Last week, the FBI took control of a botnet made up of hundreds of thousands of internet-connected devices, such as cameras, video recorders, storage devices, and routers, which was run by a Chinese government hacking group, FBI director Christopher Wray and U.S. government agencies revealed Wednesday.

The hacking group, dubbed Flax Typhoon, was “targeting critical infrastructure across the U.S. and overseas, everyone from corporations and media organizations to universities and government agencies,” Wray said at the Aspen Cyber Summit cybersecurity conference on Wednesday.

“But working in collaboration with our partners, we executed court-authorized operations to take control of the botnet’s infrastructure,” Wray said, explaining that once the authorities did that, the FBI also removed the malware from the compromised devices. “Now, when the bad guys realized what was happening, they tried to migrate their bots to new servers and even conducted a [Distributed Denial of Service] attack against us.”"

techcrunch.com/2024/09/18/u-s-

TechCrunch · U.S. government 'took control' of a botnet run by Chinese government hackers, says FBI director | TechCrunchThe FBI, NSA and other U.S. government agencies detailed a Chinese-government operation that used 260,000 of internet-connected devices to launch cyberattacks.
Public
securityskeptic :donor: :verified:

Largest ever operation against botnets hits dropper malware ecosystem

Congratulations to Europol and partners for concluding an
International operation that disrupted botnets responsible for distributing IcedID, SystemBC, Pikabot, Smokeloader and Bumblebee botnets.

europol.europa.eu/media-press/

Now it's up to the courts to impose serious sentences on the perpetrators.

EuropolLargest ever operation against botnets hits dropper malware ecosystem | EuropolBetween 27 and 29 May 2024 Operation Endgame, coordinated from Europol’s headquarters, targeted droppers including, IcedID, SystemBC, Pikabot, Smokeloader, Bumblebee and Trickbot. The actions focused on disrupting criminal services through arresting High Value Targets, taking down the criminal infrastructures and freezing illegal proceeds. This approach had a global impact on the dropper ecosystem. The malware, whose infrastructure was taken down...
#botnets#dropper#malware
ExploreLive feeds
About