Panamorfi: A New Discord DDoS Campaign
ID: c7688b6a-cf64-5a7f-8218-a6309c717103
STIX ID: report--c7688b6a-cf64-5a7f-8218-a6309c717103
Feed Name: Aqua Security Blog
Threat Score
Aqua Nautilus researchers observed an active DDoS campaign called 'Panamorfi' that leverages the Java mineping DDoS tool delivered through misconfigured Jupyter notebooks; the payload (a zip containing conn.jar and mineping.jar, MD5: 42989a405c8d7c9cb68c323ae9a9a318) establishes Discord-based control and launches TCP flood attacks, and Aqua demonstrates blocking the attack via runtime protection policies.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.