Skip to content
GoBruteforcer Botnet Targets Linux Servers and Crypto Projects

GoBruteforcer Botnet Targets Linux Servers and Crypto Projects

First seen 8 Jan 2026, 19:50 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

The GoBruteforcer botnet is actively targeting Linux servers exposed to the internet, conducting brute-force attacks on services like FTP, MySQL, PostgreSQL, and phpMyAdmin. Recent attacks have focused on databases of cryptocurrency and blockchain projects, with many servers believed to be misconfigured using AI-generated examples. Check Point Research estimates over 50,000 servers may be vulnerable due to weak credentials.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 197d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track GoBrut in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed