{"id":35376,"date":"2020-06-05T17:35:09","date_gmt":"2020-06-05T17:35:09","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/"},"modified":"2020-06-05T17:35:09","modified_gmt":"2020-06-05T17:35:09","slug":"kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/","title":{"rendered":"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet"},"content":{"rendered":"<p>Servers are being targeted with a malware attack that uses its infected hosts to brute-force other machines.<\/p>\n<p>Known to Akamai researchers as <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/blogs.akamai.com\/sitr\/2020\/06\/stealthworker-golang-based-brute-force-malware-still-an-active-threat.html\">Stealthworker<\/a>, the infection preys on weak passwords then uses a massive arsenal of malware to overtake Windows and Linux servers running popular CMS, publishing, and hosting tools.<\/p>\n<p>Akamai senior security researcher Larry Cashdollar (yes, that is his last name, and yes, he is tired of that joke) discovered the attack while operating an intentionally exposed WordPress\/MySQL container that for some reason was dealing in massive amounts of traffic.<\/p>\n<p>&#8220;I log into the system and I see a ton of connections between my system and dozens of WP sites around the internet,&#8221; Cashdollar told <em>The Register<\/em>.<\/p>\n<p>&#8220;I notice the traffic is WordPress login attempts, my system is attempting to log into their WordPress login page with a bunch of credentials.&#8221;<\/p>\n<p>While combing through the log files of the obviously compromised virtual box, he stumbled upon a suspicious WordPress theme that contained a PHP file modified to install the malware.<\/p>\n<p>Eventually, Cashdollar told <em>El Reg<\/em>, he was able to capture the malware in action and observe its entire life cycle, from introduction to complete server takeover.<\/p>\n<p>Here&#8217;s how it works. Stealthworker begins its attack with a distributed brute-force attack. Infected machines each hit the target with a number of login attempts using common passwords. By breaking up the attempts among multiple machines, the attacker can avoid limits on the number of login attempts.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2019\/05\/25\/crime_shutterstock1.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"crime\"><\/p>\n<h2 title=\"Supply and demand in action\">Oh cool, tech service prices are plummeting. And by tech services, we mean botnet rentals and stolen credit cards<\/h2>\n<p><a href=\"https:\/\/www.theregister.com\/2020\/05\/27\/criminal_services_cheaper\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>Once the admin password is guessed (in this case for WordPress, though Stealthworker also targets Drupal, Joomla, Magento, MySQL, and a host of others), the malware then runs through the steps of installing and deleting various components. For WordPress, a modified version of the Alternate-Lite theme leads to downloaders that target the back end and look to overtake the entire server via applications such as cPanel and WMH.<\/p>\n<p>The end result is a fully pwned Windows or Linux server at the command of the botnet owner. Akamai researchers say that when their infected test systems were wiped clean of the malware itself, the botnet would reinfect those machines within minutes. It was only when passwords were changed that the infection could be eradicated once and for all.<\/p>\n<p>Eventually the server is instructed to dial its command-and-control host, where it is given its instructions to join with other servers in attempting to brute-force the passwords of other machines. In the process we are told, all passwords collected from the pwned machine get added into the list of logins that the botnet attempts on other machines.<\/p>\n<p>Other than attempting to assimilate other servers, the intent of the Stealthworker malware is not really clear. There&#8217;s also not much in the way of how many people are using the attack, it could be one large operation, or several groups with the same tools.<\/p>\n<p>Akamai researcher Steve Ragan notes that while there is some indication that scraping tools such as MageCart could be used on the servers, the full control the malware affords to the attacker opens the door to just about any sort of malicious venture.<\/p>\n<p>&#8220;What they get is this broad network of vulnerable servers and websites they can use for anything,&#8221; Ragan explained.<\/p>\n<p>&#8220;The endgame is pretty much whatever the attacker feels like doing.&#8221;<\/p>\n<p>While the Stealthworker attack is a nasty one and difficult to fully remove, the solution is rather simple. Akamai recommends that admins make sure all of their passwords are complex and difficult to guess. As the attack preys on weak credentials, that one simple step should keep everything safe. \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.com\/tl\/1940\/-8722\/ransomware-has-gone-nuclear?td=wptl1940\">Ransomware has gone nuclear<\/a><\/p>\n<p>READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2020\/06\/05\/stealthworker_akamai_botnet\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Publishing platforms, hosts being targeted by Stealthworker malware Servers are being targeted with a malware attack that uses its infected hosts to brute-force other machines.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":35377,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-35376","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-06-05T17:35:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet\",\"datePublished\":\"2020-06-05T17:35:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/\"},\"wordCount\":644,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/\",\"name\":\"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg\",\"datePublished\":\"2020-06-05T17:35:09+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/","og_locale":"en_US","og_type":"article","og_title":"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-06-05T17:35:09+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet","datePublished":"2020-06-05T17:35:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/"},"wordCount":644,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/","url":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/","name":"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg","datePublished":"2020-06-05T17:35:09+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/06\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/kind-of-goes-without-saying-but-fix-your-admin-passwords-or-risk-getting-borged-by-this-brute-forcing-botnet\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Kind of goes without saying, but fix your admin passwords or risk getting borged by this brute-forcing botnet"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=35376"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35376\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/35377"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=35376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=35376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=35376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}