DarkCrewFriends Returns with Botnet Strategy

guest · Jun 26, 2020

DarkCrewFriends Returns with Botnet Strategy
The botnet can be used to mount different kinds of attacks, including code-execution and DDoS
June 26, 2020
https://threatpost.com/darkcrewfriends-returns-botnet/156963/

The hackers-for-hire group DarkCrewFriends has resurfaced and is targeting content management systems to build a botnet. The botnet can be marshalled into service to carry out a variety of criminal activities, including distributed denial-of-service (DDoS) attacks, command execution, information exfiltration or sabotage of an infected system.

Researchers said they observed DarkCrewFriends exploiting an unrestricted file upload vulnerability to compromise PHP servers that run websites.

“Many applications allow users to upload certain files to their servers, such as images or documents,” explained the researchers on Thursday in a blog post.
“These files can put the system at risk if they are not properly handled. A remote attacker can send a specially crafted request to a vulnerable server [...]”
The exploit for the particular vulnerability being targeted is a zero-day that was created and published by DarkCrewFriends, according to Check Point.
Click to expand...

Check Point Research: DarkCrewBot – The Return of the Bot Shop Crew

Check Point Researchers recently discovered an ongoing, evolving campaign from a known hackers’ group, “DarkCrewFriends.” This campaign targets PHP servers, focusing on creating a botnet infrastructure that can be leveraged for several purposes such as monetization and shutting down critical services.
Click to expand...

Log in or Sign up

DarkCrewFriends Returns with Botnet Strategy

guest Guest

Log in or Sign up

DarkCrewFriends Returns with Botnet Strategy

guest Guest

Useful Searches