Keksec

Reports per quarter

CVEs named in reports

• CVE-2014-6271 KEV
• CVE-2014-8361 KEV
• CVE-2014-9118
• CVE-2015-2051 KEV
• CVE-2016-6277 KEV
• CVE-2017-17215
• CVE-2017-18368 KEV
• CVE-2018-10561 KEV
• CVE-2018-10562 KEV ransomware
• CVE-2018-10823
• CVE-2018-16763
• CVE-2018-20062 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 26 May 2022

   Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Rapidly evolving IoT malware EnemyBot now targeting Content Management System servers and Android devices

2. 12 April 2022

   Enemybot: A Look into Keksec's Latest DDoS Botnet | FortiGuard Labs

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Enemybot: A Look into Keksec's Latest DDoS Botnet | FortiGuard Labs

3. 12 April 2022

   Enemybot- A Look into Keksec's Latest DDoS Botnet

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Enemybot- A Look into Keksec's Latest DDoS Botnet

4. 13 October 2021

   “Spytech Necro” – Keksec’s Latest Python Malware

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor “Spytech Necro” – Keksec’s Latest Python Malware

5. 23 August 2021

   VB2021 paper: The Keksec botnets we observed in the past year

   file creation date Ye Jin & Lingming Tu fromORKL

   Archived copy on ORKL Detailsfor VB2021 paper: The Keksec botnets we observed in the past year

6. 18 June 2021

   Ryuk Botnet, Simps Botnet, Gods of Destny Botnet

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ryuk Botnet, Simps Botnet, Gods of Destny Botnet

7. 17 May 2021

   Discovery of Simps Botnet Leads To Ties to Keksec Group

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Discovery of Simps Botnet Leads To Ties to Keksec Group

8. 17 May 2021

   Discovery of Simps Botnet Leads to Ties to Keksec Group

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Discovery of Simps Botnet Leads to Ties to Keksec Group

9. 18 March 2021

   The “Kek Security” Network

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The “Kek Security” Network

10. 18 March 2021

    Necro upgrades again, using Tor + dynamic domain DGA and aiming at both Windows & Linux

    Malpedia library date fromORKL

    Archived copy on ORKL Detailsfor Necro upgrades again, using Tor + dynamic domain DGA and aiming at both Windows & Linux

Newest first. Details opens the report in Explore.