URLhaus is operational for over 5 years, notifying hosting providers + network operators about malware hosted in their network 🪲 It's a shame that some hosting providers ignore abuse reports, spreading malware for over four years 🤯

Here's our current 💩-list 👇

AS38841 kbro 🇹🇼, spreading #hajime:
🌐 https://urlhaus.abuse.ch/url/86646/

AS23520 Columbus Networks 🇧🇸, spreading #hajime:
🌐 https://urlhaus.abuse.ch/url/91891/

AS29873 Newfold Digital 🇺🇸, spreading #FormBook:
🌐 https://urlhaus.abuse.ch/url/117832/

AS58955 Bangmod 🇹🇭, spreading #Emotet:
🌐 https://urlhaus.abuse.ch/url/200073/

And so the world got brighter. #Hajime

#Hajime's #iot #botnet's #linux bot #malware IP data is updated (Apr 20,2020 = 5,500+ recent P2P node's activity).
Check @circl_lu's @MISPProject's updated event or direct contact for country base data. cc: @censysio @shodanhq @badpacket @onyphe +#blueteamers
Warning: big data.

#Hajime's #iot #botnet's #linux bot #malware IP data is updated (Apr 20,2020 = 5,500+ recent P2P node's activity).
Check @circl_lu's @MISPProject's updated event or direct contact for country base data. cc: @censysio @shodanhq @badpacket @onyphe +#blueteamers
Warning: big data.