GoBruteforcer campaign (Campaign)
ID: 111b9262-2cf9-5b52-8637-fa426fa858ad
STIX ID: report--111b9262-2cf9-5b52-8637-fa426fa858ad
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2023-03-10
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
GoBruteforcer is a Golang-written botnet that brute-forces phpMyAdmin, MySQL, FTP, and PostgreSQL services using hard-coded credentials; successful compromises deploy IRC bots on phpMyAdmin or PHP web shells on other services, the malware contacts a command-and-control server for instructions, and it uses CIDR-wide scanning to discover and target additional hosts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.