Masjesu Botnet Launches DDoS Attacks on IoT Devices

Severity: High (Score: 64.5)

Sources: Thehackernews, Gbhackers

Summary

The Masjesu botnet, also known as XorBot, has been actively targeting routers, gateways, and exposed IoT infrastructure since early 2023. This botnet has transformed everyday network hardware into tools for high-volume DDoS-for-hire attacks, affecting various organizations reliant on these devices. As of April 2026, Masjesu remains operational and continues to reshape the DDoS marketplace with its stealth-focused approach. The botnet's capabilities highlight a growing trend in the misuse of IoT devices for commercial cyber attacks. Organizations are urged to enhance their security measures to mitigate the risks posed by such botnets. Specific details on the scale of attacks or affected systems were not disclosed in the articles. Key Points: • Masjesu botnet targets routers and IoT devices for DDoS attacks. • The botnet has been active since early 2023 and is still operational in 2026. • Organizations need to improve security to defend against such commercial DDoS threats.

Key Entities

• Botnet (attack_type)
• DDoS (attack_type)
• Masjesu (malware)
• Masjesu Botnet (malware)
• XorBot (malware)