malware · Mon 27 Jul 2026 · 17:19 UTC
After law enforcement disrupted JackSkid, Dysphoria shifted its IoT botnet C2 to blockchain name services and infected-device relays. Weak Telnet and SSH passwords remain the main way in. Read how the botnet adapted: https://thehackernews.com/2026/07/dysphoria-iot-botnet-adds-blockchain-c2.html
Filed UTCSource X ↗
<p>🚨 After law enforcement disrupted JackSkid, Dysphoria shifted its IoT botnet C2 to blockchain name services and infected-device relays.<br /> <br /> Weak Telnet and SSH passwords remain the main way in.<br /> <br /> Read how the botnet adapted: <a href="https://thehackernews.com/2026/07/dysphoria-iot-botnet-adds-blockchain-c2.html">thehackernews.com/2026/07/dy…</a></p> <hr /> <b>Link</b><br /> <a href="https://thehackernews.com/2026/07/dysphoria-iot-botnet-adds-blockchain-c2.html"> <img src="https://nitter.net/pic/card_img%2F2081791305076862976%2FuiiwRAmf%3Fformat%3Djpg%26name%3D800x419" />…
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.