CyberNew CyberNew
Ransomware & Malware The Record 1 month ago

Sality, one of the longest-running botnets, finally gets disrupted

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: MEDIUM
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Ransomware & Malware

Analyst Takeaway

"Image: Alex Shuper / Unsplash Sality, one of the longest-running botnets, finally gets disrupted U.S. and European authorities announced the disruption of Sality, one of the internet’s longest-running botnets, after turning the malware’s peer-to-peer architecture against itself to cut thousands of infected computers off from the suspected Russian operators controlling the network. Active since at..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Botnet
Image: Alex Shuper / Unsplash

Sality, one of the longest-running botnets, finally gets disrupted

U.S. and European authorities announced the disruption of Sality, one of the internet’s longest-running botnets, after turning the malware’s peer-to-peer architecture against itself to cut thousands of infected computers off from the suspected Russian operators controlling the network.

Active since at least 2003, the botnet was disrupted Monday in an operation involving authorities in the U.S., Bulgaria, Hungary and Romania, alongside cybersecurity company CrowdStrike and the nonprofit Shadowserver Foundation.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →