At The Edge Clear: March 30 - April 06, 2026
Summary: GreyNoise recorded its broadest single-week botnet recruitment expansion since January 2026 for the March 30 to April 06, 2026 analysis period, alongside twenty new exploitation tags targeting end-of-life routers, DVRs, and ICS platforms including FUXA HMI. RDP brute-force attempts rose 340.7% to 940,019 sessions, path traversal rose 312.5% to 3.26M sessions, and Ollama AI scanning rose 583.6%, with the same infrastructure probing IoT, ICS, and AI endpoints.
What you should know: The same infrastructure exploiting IoT devices is now probing ICS and AI endpoints, so a compromise on an end-of-life router and one on an exposed AI service may be the same campaign rather than separate incidents.
Read the original at GreyNoise Blog ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026