DanaBot - Geek Feed

DanaBot malware is back to infecting Windows after 6-month break

November 16, 2025November 16, 2025 geekfeed0Tagged DanaBot, Info Stealer, Information Stealer, MaaS, malware, Malware-as-a-Service

The DanaBot malware has returned with a new version observed in attacks, six-months after law enforcement’s Operation Endgame disrupted its activity in May. According to security researchers at Zscaler ThreatLabz, there is a new variant of DanaBot, version 669, that has a command-and-control (C2) infrastructure using Tor domains (.onion) and “backconnect” nodes. Zscaler also identified and […]

1 min read

DanaBot malware operators exposed via C2 bug added in 2022

June 13, 2025June 13, 2025 geekfeed0Tagged DanaBot, DanaBot malware, malware, Malware-as-a-Service, Memory Leak, vulnerability

A vulnerability in the DanaBot malware operation introduced in June 2022 update led to the identification, indictment, and dismantling of their operations in a recent law enforcement action. DanaBot is a malware-as-a-service (MaaS) platform active from 2018 through 2025, used for banking fraud, credential theft, remote access, and distributed denial of service (DDoS) attacks. Zscaler’s ThreatLabz researchers […]

2 mins read