GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials
The databases of cryptocurrency and blockchain projects have been the subject of a recent wave of GoBruteforcer assaults, which aim to co-opt them into a botnet that can brute-force user passwords for services like FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux servers.
According to an analysis released last week by Check Point Research, the current wave of campaigns is caused by two factors: the widespread use of AI-generated server deployment examples that spread weak defaults and common usernames, and the continued use of legacy web stacks like XAMPP that expose FTP and admin interfaces with little hardening.
The ability of GoBruteforcer, also known as GoBrut, to target Unix-like platforms running x86, x64, and ARM architectures to deploy an Internet Relay Chat (IRC) bot and a w...