--- title: "#botnet articles | Hashnode" description: "Explore 30 articles tagged #botnet on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/botnet" --- Tag # #botnet 30 posts · 1 followers [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Oct 26](https://hashnode.com/posts/a-poem-on-github-and-a-cve-chain-the-poellm-botnet-mining-on-exposed-ai-infrastructure/6adebc1687a91600d8789885) ### [A Poem on GitHub and a CVE Chain: the PoeLLM Botnet Mining on Exposed AI Infrastructure](https://blog.fiscybersec.com/a-poem-on-github-and-a-cve-chain-the-poellm-botnet-mining-on-exposed-ai-infrastructure?utm_source=hashnode&utm_medium=feed) Summary PoeLLM is malware that Black Lotus Labs (Lumen) has tracked since April 2026. It has compromised more than 3,400 servers, peaking at over 800 active systems per day. Victims are concentrated i 12 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/a-poem-on-github-and-a-cve-chain-the-poellm-botnet-mining-on-exposed-ai-infrastructure?utm_source=hashnode&utm_medium=feed) [Đinh Văn Mạnh](https://hashnode.com/@PrismWalker) · [Sep 18](https://hashnode.com/posts/bambootoken-the-malware-that-speaks-an-iot-protocol-to-stay-hidden/6aad4c82edf7e13fb496e204) ### [BambooToken: The Malware That Speaks an IoT Protocol to Stay Hidden](https://blog.fiscybersec.com/bambootoken-the-malware-that-speaks-an-iot-protocol-to-stay-hidden?utm_source=hashnode&utm_medium=feed) Overview In September 2026, Lumen Black Lotus Labs published a report on BambooToken — a previously undocumented malware framework that operated undetected from February 2023 through July 2026, target 18 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/bambootoken-the-malware-that-speaks-an-iot-protocol-to-stay-hidden?utm_source=hashnode&utm_medium=feed) [Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Aug 20](https://hashnode.com/posts/dysphoria-botnet-blockchain-c2-en/6a86c65141cb3efb3b10053a) ### [Dysphoria: Six Days After the Takedown, and Eight Years After the Idea](https://blog.fiscybersec.com/dysphoria-botnet-blockchain-c2-en?utm_source=hashnode&utm_medium=feed) Summary On 19 March 2026, authorities in the United States, Canada and Germany disrupted the infrastructure behind the four largest IoT botnets ever documented — Aisuru, Kimwolf, JackSkid and Mossad. 21 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/dysphoria-botnet-blockchain-c2-en?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 5](https://hashnode.com/posts/trickbot/6a735c793271a2fbb460d843) ### [TrickBot](https://sagunwrites.hashnode.dev/trickbot?utm_source=hashnode&utm_medium=feed) The Malware That Became a Cybercrime Swiss Army Knife 7 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/trickbot?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 5](https://hashnode.com/posts/mirai/6a735ada6a988fa7040d70f7) ### [Mirai](https://sagunwrites.hashnode.dev/mirai?utm_source=hashnode&utm_medium=feed) When Everyday Devices Became a Botnet 8 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/mirai?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Aug 1](https://hashnode.com/posts/what-is-iot-malware/6a6dfef14a08c4c4d1cdb9af) ### [What Is IoT Malware?](https://sagunwrites.hashnode.dev/what-is-iot-malware?utm_source=hashnode&utm_medium=feed) Learn what IoT malware is, how attackers compromise connected devices, why IoT botnets are dangerous, and how smart devices can be protected. 4 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/what-is-iot-malware?utm_source=hashnode&utm_medium=feed) [Sagun](https://hashnode.com/@sagun-labs) · [Jul 31](https://hashnode.com/posts/what-is-a-botnet/6a6cdc1d76c173f338e57f49) ### [What Is a Botnet?](https://sagunwrites.hashnode.dev/what-is-a-botnet?utm_source=hashnode&utm_medium=feed) Learn what a botnet is, how compromised devices form coordinated networks, and why botnets are a major cybersecurity threat. 3 min read · [sagunwrites.hashnode.dev](https://sagunwrites.hashnode.dev/what-is-a-botnet?utm_source=hashnode&utm_medium=feed) [DarkStar](https://hashnode.com/@itsdiego06) · [Jul 4](https://hashnode.com/posts/xupertv-formerly-magistv-the-largest-residential-proxy-botnet-ever-built-disguised-as-an-iptv-app/6a4859d302b74d608eca80d2) ### [XuperTV (formerly MagisTV): The Largest Residential Proxy Botnet Ever Built - Disguised as an IPTV App](https://thedevbox.hashnode.dev/xupertv-formerly-magistv-the-largest-residential-proxy-botnet-ever-built-disguised-as-an-iptv-app?utm_source=hashnode&utm_medium=feed) TL;DR: XuperTV, a popular Latin American IPTV app with millions of downloads, contains a hidden P2P proxy network that turns every user's device into a residential relay node. Our analysis confirms th 12 min read · [thedevbox.hashnode.dev](https://thedevbox.hashnode.dev/xupertv-formerly-magistv-the-largest-residential-proxy-botnet-ever-built-disguised-as-an-iptv-app?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [May 21](https://hashnode.com/posts/turla-has-just-created-something-even-more-dangerous-than-a-backdoor-a-self-operating-espionage-botnet/6a0ecb308b034602211b1f6e) ### [Turla has just created something even more dangerous than a backdoor: a self-operating espionage botnet.](https://blog.fiscybersec.com/turla-has-just-created-something-even-more-dangerous-than-a-backdoor-a-self-operating-espionage-botnet?utm_source=hashnode&utm_medium=feed) Overview of the campaign For many years, APT (Advanced Persistent Threat) campaigns often relied on a familiar model: a covert malware connecting to a command and control (C2) server to receive instru 12 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/turla-has-just-created-something-even-more-dangerous-than-a-backdoor-a-self-operating-espionage-botnet?utm_source=hashnode&utm_medium=feed) [rakib khan](https://hashnode.com/@newsababil) · [May 7](https://hashnode.com/posts/inside-the-botnet-how-ddos-attacks-on-brazilian-isps-were-fueled-by-an-antiddos-firm/69fc2a6dc19999bbbdc132c1) ### [Inside the Botnet: How DDoS attacks on Brazilian ISPs Were Fueled by an Anti‑DDoS Firm](https://ilove.hashnode.dev/inside-the-botnet-how-ddos-attacks-on-brazilian-isps-were-fueled-by-an-antiddos-firm?utm_source=hashnode&utm_medium=feed) The Unseen Engine Behind Brazil’s Gigabit‑Scale DDoS Onslaught A coordinated flood of malicious traffic crippled several Brazilian internet service providers earlier this year, delivering peaks of up to 1,200 Gbps. Security researchers have traced th... 1 min read · [ilove.hashnode.dev](https://ilove.hashnode.dev/inside-the-botnet-how-ddos-attacks-on-brazilian-isps-were-fueled-by-an-antiddos-firm?utm_source=hashnode&utm_medium=feed)