New Scraper Botnet with 3,600+ Unique Devices Attacking Targets in US and UK

Researchers uncovered a sophisticated scraper botnet of ~3,600 unique devices active since April 2025 that focuses on U.S. and U.K. targets and is heavily concentrated in Taiwan (54% of IPs); it uses the User‑Agent "Hello-World/1.0" and systematic GET requests across ports 80–85, evades traditional detection by relying on behavioral JA4+ signatures, and has 1,359 IPs classified as malicious with 122 marked suspicious.