Botnet Hijacks ADB

Gbhackers •Mayura Kathir • May 4, 2026

New research has uncovered a Mirai-derived botnet called xlabs_v1 that turns Android devices with exposed Android Debug Bridge (ADB) into a distributed attack platform for knocking Minecraft servers and other game hosts offline. By abusing TCP port 5555 on poorly secured Android-based hardware, the operators are quietly building a rentable DDoS-for-hire service aimed at the gaming ecosystem. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

xlabs_v1 Botnet Exploits ADB to Target Minecraft Servers A newly identified botnet named xlabs_v1, derived from the Mirai malware, is exploiting Android devices with exposed Android Debug Bridge (ADB) ports to launch distributed denial-of-service (DDoS) attacks on Minecraft servers. The botnet operates by abusing TCP port 5555, which is often left unsecured on Android devices, allowing attackers to convert these devices into a DDoS-for-hire service. This service is particularly aimed at the gaming community, enabling paying customers to flood game servers with traffic. The botnet's operators are quietly building this infrastructure, which poses a significant threat to online gaming platforms. The full scope of the botnet's impact is still being assessed, but it highlights ongoing vulnerabilities in Android device security. As of now, there are no specific CVEs or patches mentioned to mitigate this threat. 4 sources 49

Extracted Entities

Botnet Hijacks ADB

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)