GoBruteforcer Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
January 7, 2026
Last Seen
January 13, 2026

GoBruteforcer is a malware family that forms a global Linux-focused botnet by compromising servers through weak credentials, then targets crypto and blockchain projects and their databases.

Overview

GoBruteforcer is a malware family that forms a global Linux-focused botnet by compromising servers through weak credentials, then targets crypto and blockchain projects and their databases. Its large scale and sector-specific targeting make it notable for crypto infrastructure risk and credential hygiene concerns across affected deployments.

Related Threat Clusters

  • GoBruteforcer Botnet Targets 50,000 Linux Servers

    A new version of the GoBruteforcer botnet has been identified, targeting 50,000 Linux servers with weak credentials and AI-generated configurations. The botnet exploits vulnerabilities in server security to gain…

    2 articles · Updated January 12, 2026
  • GoBruteforcer Botnet Exploits Weak Credentials in Crypto Sector

    The GoBruteforcer botnet is targeting cryptocurrency and blockchain projects by exploiting weak credentials and legacy web stacks. Its propagation is enhanced by AI-generated server deployments, making it a significant…

    3 articles · Updated January 13, 2026
  • GoBruteforcer Botnet Targets Linux Servers and Crypto Projects

    The GoBruteforcer botnet is actively targeting Linux servers exposed to the internet, conducting brute-force attacks on services like FTP, MySQL, PostgreSQL, and phpMyAdmin. Recent attacks have focused on databases of…

    2 articles · Updated January 8, 2026

Recent Intelligence Reports

  • GoBruteforcer Botnet Targeting Crypto, Blockchain Projects — Securityweek · January 13, 2026
  • GoBruteforcer Botnet Targeting Crypto, Blockchain Projects — Feeds.Feedburner · January 13, 2026
  • GoBruteforcer Botnet Targets 50K — Darkreading · January 12, 2026
  • GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak Credentials — Thehackernews · January 12, 2026
  • GoBruteforcer Botnet Targets Linux Servers — Infosecurity-Magazine · January 8, 2026
  • Global GoBruteforcer Botnet Campaign Threatens 50,000 Linux Servers — Gbhackers · January 8, 2026
  • New GoBruteforcer attack wave targets crypto, blockchain projects — Bleepingcomputer · January 7, 2026

CVSS v3.1 Breakdown