Back Securityaffairs.Co

RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow

Securityaffairs.Co •Pierluigi Paganini • July 1, 2026

RustDuck is a small, evolving DDoS botnet migrating to Rust. It uses advanced encryption, anti-analysis evasion, and exploits known IoT flaws. Since February 2026, researchers at QiAnXin’s XLab have been tracking a new malware family, called RustDuck, that hijacks routers, cameras, Android set-top boxes, and exposed servers, then uses them to flood targets with junk […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RustDuck Botnet Evolves to Target IoT Devices with Advanced Techniques The RustDuck botnet, first identified in early 2026, is rapidly evolving by migrating from C to Rust, enhancing its evasion and encryption capabilities. It targets various IoT devices, including routers and cameras, as well as enterprise servers, exploiting vulnerabilities such as CVE-2017-17215 and employing brute-force attacks on weak credentials. The botnet utilizes a two-stage architecture for infections and incorporates strong encryption methods like ChaCha20-Poly1305 and AES-GCM. Researchers from QiAnXin XLab are closely monitoring its development due to its sophisticated anti-analysis measures and potential for growth. Although currently small, its adaptability and technological advancements present a significant threat to cybersecurity. Security professionals are urged to remain vigilant against this evolving threat. 5 sources 65

Extracted Entities

RustDuck: The Botnet That’s Still Small but Engineering Like It Plans to Grow

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)