CRITICALMalware
Global

Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

·Source: The Hacker News

Updated:

Executive Summary

Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design makes the botnet harder to disrupt. CNCERT, China's national computer emergency response team, and XLab, the threat-intelligence lab of Chinese

Analysis

Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design makes the botnet harder to disrupt. CNCERT, China's national computer emergency response team, and XLab, the threat-intelligence lab of Chinese
Source Attribution

Originally published by The Hacker News on Jul 27, 2026.

Related Threats

MEDIUMMalware

New Dysphoria DDoS botnet spreads to 200k devices worldwide

A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of service (DDoS) attacks and traffic relay operations. [...]

BleepingComputer
MEDIUMMalware

Health system in South Carolina, Georgia closes offices after malware affects networks

On Sunday, AnMed published a statement online saying they were “experiencing a cybersecurity disruption involving malware” and were working to restore systems and determine the scope of the incident.

The Record
MEDIUMMalware

Telegram phishing campaign targeted exiled Belarusian activist, Russians and Kazakhstanis

Researchers have uncovered a highly personalized phishing campaign that used Telegram to try to hijack the account of an exiled Belarusian activist, as well as users in Russia and Kazakhstan.

The Record