GoBruteforcer Botnet Targets Linux Servers

GoBruteforcer is an active botnet campaign that brute-forces weak or default credentials on internet-exposed Linux services (FTP, MySQL, PostgreSQL, phpMyAdmin), turning compromised hosts into scanning/attack nodes; a newer Go-based, obfuscated variant with stronger persistence has been observed and researchers estimate over 50,000 publicly accessible servers may be vulnerable, with evidence of crypto-focused theft activity.