Researchers Hijack 4,000 Abandoned Web Backdoors: Cybercriminals Left Hanging
Over 4,000 abandoned web backdoors were hijacked by researchers who registered expired domains. This move sinkholed their communication infrastructure, preventing malicious actors from gaining control. Among the targets were high-profile government and university systems. WatchTowr Labs and The Shadowserver Foundation worked together to safeguard these domains and victims.
Hot Take:
Who knew expired domains could be a haunted house for web backdoors? WatchTowr Labs and The Shadowserver Foundation have taken on the job of digital ghostbusters, reining in over 4,000 web shells left to roam free. It’s like finding out your grandma’s rotary phone is actually a hotline to cyber-mischief. Just goes to show, in the world of cybersecurity, even digital cobwebs can be dangerous!
Key Points:
- Over 4,000 web backdoors were hijacked and their communication infrastructure sinkholed.
- Expired domains used for commanding these backdoors were registered by researchers.
- High-profile targets included government and university systems.
- Domains were handed over to The Shadowserver Foundation to prevent future malicious use.
- WatchTowr Labs highlighted the danger of expired domains in cyber operations.