RST TI Report Digest: 13 Apr 2026

**Masjesu Rising:** A commercially managed IoT botnet active since early 2023 that uses stealthy evasion (avoiding blocklisted/DoD IPs, XOR-encrypted configs), decentralized C2, and random IP scanning to compromise IoT devices and execute high-throughput DDoS attacks (reported traffic >290 Gbps); the report includes multiple IOCs (IPs, domains, numerous SHA-256 hashes) and expects the threat to persist through 2026.