Dysphoria Hijacks Routers, Gateways and IP Cameras to Build Massive IoT Botnet

Gbhackers •Mayura Kathir • August 14, 2026

The Dysphoria botnet has expanded into a major Internet of Things threat, with a new Shadowserver Special Report identifying approximately 296,000 compromised devices. The campaign targets exposed routers, gateways, IP cameras and other embedded Linux systems, converting poorly secured equipment into a distributed platform for DDoS attacks and increasingly, residential proxy and relay operations. Dysphoria’s […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Dysphoria Botnet Compromises 296,000 IoT Devices for DDoS Attacks The Dysphoria botnet has compromised approximately 296,000 Internet of Things devices, including routers, gateways, and IP cameras. This botnet is exploiting poorly secured embedded Linux systems, converting them into a platform for Distributed Denial of Service (DDoS) attacks and residential proxy operations. The scale of the botnet poses a significant threat as these devices are often located in residential areas, making them less monitored. The Shadowserver Special Report has identified the extent of the compromise, emphasizing the urgent need for improved security measures on IoT devices. The botnet's operators are leveraging these compromised devices to target various online entities. As of now, the botnet remains active and poses ongoing risks to internet infrastructure. 2 sources 67

Extracted Entities

Dysphoria Hijacks Routers, Gateways and IP Cameras to Build Massive IoT Botnet

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)