10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet

RUBYCARP is a long-running, financially motivated cybercriminal group (likely Romanian) operating a botnet of over 600 compromised hosts to conduct crypto-mining, DDoS and phishing. The group deploys ShellBot (PerlBot), leverages public exploits (e.g., Laravel CVE-2021-3129), brute-force/credential reuse against WordPress, and coordinates via public/private IRC (notably chat.juicessh.pro and an Undernet channel), indicating an established, multifaceted criminal operation.