#9
The Hacker News
general
June 10, 2026 at 16:08 UTC
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
By [email protected] (The Hacker News)
AI Summary
Lumen researchers identified a resurgence of the JDY botnet, a China-nexus reconnaissance infrastructure now comprising over 1,500 compromised SOHO and IoT devices used to continuously scan, fingerprint, and map exposed internet services at scale. The botnet operates as a centrally controlled high-performance scanner, consistent with pre-intrusion targeting behavior seen in Chinese state-sponsored campaigns like Salt Typhoon. Network defenders should review firewall logs for JDY scanning signatures, particularly on edge devices.
Relevance score: 75.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →