DanaBot Launches DDoS Attack

This ThreatLabz report documents an active DanaBot affiliate (ID 5) campaign that delivered a Delphi-based HTTP DDoS executable via DanaBot's download-and-execute functionality to target the Ukrainian Ministry of Defense webmail and an IP associated with invaders-rf.com; the report includes the DDoS binary SHA-256, screenshots, contextual analysis of DanaBot as a malware-as-a-service, and notes potential additional credential/document theft and uncertain attribution.