Pill Gang Used Microsoft’s Network in Attack on Krebs OnSecurity.com
Summary: A denial-of-service attack on KrebsOnSecurity.com on Sept. 23 averaged 2.3 gigabits of junk data per second, and researchers at SURBL traced it to botnets run by Russian pill gangs using a compromised machine at Microsoft address 131.107.202.197 as a domain name server. Microsoft later said two misconfigured network hardware devices in a testing lab were compromised due to human error, had been removed, and that no customer data or production systems were affected.
What's compelling: A testing-lab device on Microsoft's own network was conscripted into a botnet attack, and the same address was later tied to more than 1,000 fraudulent pharmacy sites - a reminder that internet-facing lab hardware with default or weak controls is infrastructure an attacker can borrow.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026