VVũ Nhật Lâm5d ago · 12 min readA Poem on GitHub and a CVE Chain: the PoeLLM Botnet Mining on Exposed AI InfrastructureSummary PoeLLM is malware that Black Lotus Labs (Lumen) has tracked since April 2026. It has compromised more than 3,400 servers, peaking at over 800 active systems per day. Victims are concentrated iblog.fiscybersec.com
ĐĐinh Văn MạnhSep 18 · 18 min readBambooToken: The Malware That Speaks an IoT Protocol to Stay HiddenOverview In September 2026, Lumen Black Lotus Labs published a report on BambooToken — a previously undocumented malware framework that operated undetected from February 2023 through July 2026, target1blog.fiscybersec.com
VVũ Nhật LâmAug 20 · 21 min readDysphoria: Six Days After the Takedown, and Eight Years After the IdeaSummary On 19 March 2026, authorities in the United States, Canada and Germany disrupted the infrastructure behind the four largest IoT botnets ever documented — Aisuru, Kimwolf, JackSkid and Mossad. blog.fiscybersec.com
SSagunAug 5 · 7 min readTrickBotSome malware is designed to perform one job. TrickBot wasn't like that. It began primarily as a banking trojan, but over time it evolved into a sophisticated modular malware platform capable of supporsagunwrites.hashnode.dev
SSagunAug 5 · 8 min readMiraiWhat if thousands of devices connected to the Internet suddenly stopped being ordinary devices? What if they became part of a massive network controlled by someone else? That is essentially what happesagunwrites.hashnode.dev
SSagunAug 1 · 4 min readWhat Is IoT Malware?Your phone isn't the only device connected to the internet. Cameras, smart TVs, routers, watches, speakers, printers, appliances, and even industrial equipment can communicate over networks. Together,sagunwrites.hashnode.dev
SSagunJul 31 · 3 min readWhat Is a Botnet?A single infected computer can cause problems. But imagine thousands—or even millions—of infected computers working together under the control of a single attacker. This is known as a botnet, one of tsagunwrites.hashnode.dev
DDarkStarJul 4 · 12 min readXuperTV (formerly MagisTV): The Largest Residential Proxy Botnet Ever Built - Disguised as an IPTV AppTL;DR: XuperTV, a popular Latin American IPTV app with millions of downloads, contains a hidden P2P proxy network that turns every user's device into a residential relay node. Our analysis confirms ththedevbox.hashnode.dev
LLưu Tuấn AnhMay 21 · 12 min readTurla has just created something even more dangerous than a backdoor: a self-operating espionage botnet.Overview of the campaign For many years, APT (Advanced Persistent Threat) campaigns often relied on a familiar model: a covert malware connecting to a command and control (C2) server to receive instrublog.fiscybersec.com
Rrakib khanMay 7 · 1 min readInside the Botnet: How DDoS attacks on Brazilian ISPs Were Fueled by an Anti‑DDoS FirmThe Unseen Engine Behind Brazil’s Gigabit‑Scale DDoS Onslaught A coordinated flood of malicious traffic crippled several Brazilian internet service providers earlier this year, delivering peaks of up to 1,200 Gbps. Security researchers have traced th...ilove.hashnode.dev
