logo

Dreambus campaign (2023) (Campaign)

ID: 575ab295-80bc-5410-a38f-a6bf781e30b2

STIX ID: report--575ab295-80bc-5410-a38f-a6bf781e30b2

Feed Name: Wiz Cloud Threat Landscape

Threat Score
70/100

Date Published: 2024-01-11

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

The note highlights a resurgence of the DreamBus botnet leveraging a newly released Metabase exploit module and targeting a RocketMQ 1-day vulnerability, with links to Zscaler and Juniper threat research describing the activity. Organizations using Metabase or RocketMQ should assume active exploitation risk, prioritize patching, and review detections for botnet activity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.