(Data Query Service)
(DNS Firewall)
(IP & Domain Intelligence)
Botnet Threat Update January to June 2025
Botnets disrupted worldwide...Operation Endgame is BACK!
Operation Endgame, “Season 2”, is officially announced as of Friday, May 23rd, 2025. International law enforcement agencies and their partners have once again joined forces to disrupt and dismantle botnet infrastructure and their operators. In this post, get details of the take-down itself and Spamhaus’ role in victim account remediation.
Networks hosting botnet C&Cs: Same players, same problems
With every Botnet Threat Update we publish, the same networks consistently appear in the Top 20 for hosting botnet command and control (C&C) servers. But why does this keep happening? In this Botnet Spotlight, we look into the root causes behind this persistent issue and what networks must do to break the cycle.
Botnet Threat Update July to December 2024
Botnet Threat Update January to June 2024
Operation Endgame | Botnets disrupted after international action
On Thursday, May 30th, 2024, a coalition of international law enforcement agencies announced "Operation Endgame". This effort targeted multiple botnets, such as IcedID, Smokeloader, SystemBC, Pikabot, and Bumblebee, as well as their operators, and Spamhaus is assisting with the remediation efforts.
Botnet Threat Update Q4 2023
Botnet Threat Update Q3 2023
Qakbot - the takedown and the remediation
Writing "Qakbot" and "takedown" in the same sentence is quite something. Usually, Spamhaus is bemoaning the ever-growing numbers of compromised IPs associated with this malware. But, on Tuesday, August 29th, 2023, the Federal Bureau of Investigation (FBI) announced that it coordinated an international group...
Botnet Threat Update Q2 2023
Botnet Threat Update Q1 2023
Neutralizing Tofsee Spambot – Part 3 | Network-based kill switch
In part three, we focus on using a network kill switch - causing an out-of-bounds read error, leading to Tofsee crashing.
Neutralizing Tofsee Spambot - Part 2 | InMemoryConfig store vaccine
In part two, learn about a second malware vaccine our team has produced, focused on polluting Tofsee's internal configuration store.
Botnet Threat Update, Q4 2022
Annual Botnet Threat Update 2022
