Microsoft Disrupts ‘Nitol’ Botnet in Piracy Sweep
Summary: Microsoft obtained a court order from the U.S. District Court for the Eastern District of Virginia granting it temporary control over the name servers of 3322.org, a Chinese dynamic DNS provider, as part of an operation it dubbed Operation b70. Microsoft told the court it found roughly 500 strains of malware hosted on more than 70,000 subdomains at 3322.org, and that about 20 percent of computers its researchers bought in various Chinese cities were already infected with the Nitol malware.
What you should know: Joe Stewart of Dell SecureWorks reported that only 57 percent of the subdomains he tracked for targeted espionage activity were disrupted, and Gunter Ollmann of Damballa said all of the roughly 70 botnets it tracks with command-and-control domains inside 3322.org have secondary controllers outside it.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026