JDY Botnet Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

June 10, 2026

Last Seen

June 11, 2026

Related Threat Clusters

JDY Botnet Grows to 1,500 Devices for Rapid Vulnerability Mapping
The JDY botnet, linked to Chinese state-sponsored actors, has expanded to over 1,500 compromised small office and IoT devices, primarily in the U.S. and Brazil. This botnet scans for newly disclosed vulnerabilities…

12 articles · Updated June 10, 2026

Recent Intelligence Reports

JDY Botnet Evolves After KV Takedown, Targets Military Networks — Securityaffairs.Co · June 11, 2026
A Chinese state-linked botnet has grown to 1,500 hacked routers and is mapping vulnerable ... — Ground.News · June 11, 2026
JDY botnet expands, enabling rapid exploitation of disclosed vulnerabilities — Scworld · June 10, 2026
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance — Thehackernews · June 10, 2026

Related Entities

Volt Typhoon Botnet Malware Hikvision Ubiquiti Brazil China Government KV-botnet T1046 - Network Service Discovery T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol