{"id":28591,"date":"2019-08-21T22:39:04","date_gmt":"2019-08-21T22:39:04","guid":{"rendered":"http:\/\/af715465-1227-4b2b-bee6-763672dbfd28"},"modified":"2019-08-21T22:39:04","modified_gmt":"2019-08-21T22:39:04","slug":"a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/","title":{"rendered":"A botnet has been cannibalizing other hackers&#8217; web shells for more than a year"},"content":{"rendered":"<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2019\/08\/21\/f66817f0-d5b1-41ba-8a36-a51fee24220d\/ea29a7dc46090b91b9158f9a5891d2ce\/fish-eat-other-fish.png\" class alt=\"fish-eat-other-fish.png\"><\/span><\/p>\n<p>A major botnet operation has been attacking and taking over the web shells (backdoors on web servers) of other malware operations for more than a year, security researchers from Positive Technologies revealed today.<\/p>\n<p>Researchers linked the botnet to a former Windows trojan named <a href=\"https:\/\/malpedia.caad.fkie.fraunhofer.de\/details\/win.neutrino\" target=\"_blank\" rel=\"noopener noreferrer\">Neutrino<\/a> (also known as Kasidet), whose operators appear to have shifted from targeting desktop users to online servers, on which they install a cryptocurrency-mining malware.<\/p>\n<p>Positive Technologies said this new phase of the Neutrino gang&#8217;s operation started in early 2018, when the group assembled a multi-functional botnet that scanned random IP addresses on the internet, searching for particular web apps and servers to infect.<\/p>\n<p>To breach other servers, the Neutrino botnet used various techniques, such as using exploits for old and new vulnerabilities, searching phpMyAdmin servers that were left without a password, but also brute-forcing their way into root accounts for phpMyAdmin, Tomcat, and MS-SQL systems.<\/p>\n<p>There&#8217;s nothing particularly new or interesting in this modus operandi, as by this point, this is how most botnets operate nowadays.<\/p>\n<h3>Neutrino brute-forces competitors&#8217; web shells<\/h3>\n<p>However, security researchers say they&#8217;ve also spotted Neutrino doing odd things, not seen in many other botnets. For example, Neutrino searches for Ethereum nodes that were left running with default passwords, connects to these systems, and steals any locally stored funds.<\/p>\n<p>But the thing that set Neutrino apart from most other cryptomining botnets that are active today was its focus on hijacking web shells.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>Web shells are web-accessible backdoor scripts that hackers plant on servers they manage to compromise.<\/p>\n<p>Web shells have a web-based interface to which hackers can connect to and issue commands via their browser, or a programmatic interface to which they send automated instructions.<\/p>\n<p>According to Positive Technologies, Neutrino has been searching the web for 159 different types of PHP web shells and two JSP (Java Server Pages) ones.<\/p>\n<p>The botnet compiles a list of web shells, and then launches brute-force attacks in an attempt too guess the web shells&#8217; login credentials and take over the shells &#8212; and the underlying web servers.<\/p>\n<p><a href=\"https:\/\/www.zdnet.com\/article\/two-botnets-are-fighting-over-control-of-thousands-of-unsecured-android-devices\/\" target=\"_blank\" rel=\"noopener noreferrer\">Botnet operators are often in competition with one another<\/a>, but most of the time they infect devices and use an antivirus-like system to keep competitors at bay and from infecting the same device.<\/p>\n<p>It&#8217;s quite rare when you see one botnet cannibalizing another malware botnet&#8217;s infected hosts.<\/p>\n<h3>A very noisy botnet<\/h3>\n<p>As for Neutrino&#8217;s success, Positive Technologies said the botnet has been one of the top three senders of queries to their honeypots.<\/p>\n<p>Based on the company&#8217;s investigation, the botnet has been quite successful in infecting Windows servers running phpStudy, an integrated learning environment popular primarily popular among Chinese developers.<\/p>\n<p>However, other types of servers were also compromised, such as those running phpMyAdmin apps.<\/p>\n<p>&#8220;To protect servers from Neutrino infection, we recommend that administrators check the password for the root account in phpMyAdmin,&#8221; said Kirill Shipulin, security researcher at Positive Technologies. &#8220;Make sure to patch services and install the latest updates. Remember, Neutrino is regularly updated with new exploits.&#8221;<\/p>\n<p><a href=\"http:\/\/blog.ptsecurity.com\/2019\/08\/finding-neutrino.html\" target=\"_blank\" rel=\"noopener noreferrer\">Technical details about Neutrino&#8217;s modus operandi<\/a> are available in Positive Technologies&#8217; report.<\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Neutrino botnet is hijacking servers by taking over other hackers&#8217; PHP and Java web shells.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":28592,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-28591","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>A botnet has been cannibalizing other hackers&#039; web shells for more than a year 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A botnet has been cannibalizing other hackers&#039; web shells for more than a year 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-21T22:39:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"445\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"A botnet has been cannibalizing other hackers&#8217; web shells for more than a year\",\"datePublished\":\"2019-08-21T22:39:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/\"},\"wordCount\":535,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/\",\"name\":\"A botnet has been cannibalizing other hackers' web shells for more than a year 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png\",\"datePublished\":\"2019-08-21T22:39:04+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png\",\"width\":1000,\"height\":445},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A botnet has been cannibalizing other hackers&#8217; web shells for more than a year\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A botnet has been cannibalizing other hackers' web shells for more than a year 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/","og_locale":"en_US","og_type":"article","og_title":"A botnet has been cannibalizing other hackers' web shells for more than a year 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-08-21T22:39:04+00:00","og_image":[{"width":1000,"height":445,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"A botnet has been cannibalizing other hackers&#8217; web shells for more than a year","datePublished":"2019-08-21T22:39:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/"},"wordCount":535,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/","url":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/","name":"A botnet has been cannibalizing other hackers' web shells for more than a year 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png","datePublished":"2019-08-21T22:39:04+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year.png","width":1000,"height":445},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/a-botnet-has-been-cannibalizing-other-hackers-web-shells-for-more-than-a-year\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"A botnet has been cannibalizing other hackers&#8217; web shells for more than a year"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/28591","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=28591"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/28591\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/28592"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=28591"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=28591"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=28591"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}