Grey Noise Identifies New Scraper Botnet Concentrated in Taiwan

Summary: GreyNoise identified a previously untracked variant of a scraper botnet using a globally unique network fingerprint built on JA4+ signatures, detecting behavior rather than the easily spoofed Hello-World/1.0 user-agent string. The company detected over 3,600 unique IPs matching the signature worldwide, with infrastructure concentrated in Taiwan and targeted systems predominantly in the United States and United Kingdom.
Why it matters: More than 3,600 IPs are already sending this traffic, and the botnet's concentration in Taiwanese IP space means defenders relying on user-agent strings or simple geolocation will miss it entirely.

Read the original at GreyNoise Blog ↗