Pivoting for Nosviak
ID: 5e27bcff-04a9-5500-b83f-a8b20c6eccab
STIX ID: report--5e27bcff-04a9-5500-b83f-a8b20c6eccab
Feed Name: Censys Blog
Date Published: 2025-01-22
Date Updated: 2026-04-27
Author: Jean Pierre Ruiz Ocampo; Mark Ellzey; Senior Security Researcher
Censys investigators analyzed the Nosviak2 command-and-control ecosystem and uncovered a DDoS-as-a-Service network operating under multiple storefronts that share branding, SSH server keys, banners, favicons, HTTP fingerprints, and domains; the report provides host lists, fingerprints, and a consolidated Censys search query linking roughly 150+ hosts across multiple ASes and geographies, indicating an active network offering DDoS and proxy services and exposing numerous IOCs for detection and mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.