Oops: Dana Bot Malware Devs Infected Their Own PCs
Summary: The U.S. government unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, an information-stealing malware-as-a-service platform sold on Russian cybercrime forums since 2018. The FBI says the malware infected more than 300,000 systems globally with estimated losses over $50 million, and that a second version emerging in January 2021 was used for espionage against military, diplomatic and NGO computers in the United States, Belarus, the United Kingdom, Germany and Russia.
Why it matters: The FBI's seized server data showed the DanaBot operators infected their own PCs, uploading their credential data to stolen-data repositories the feds now hold - the same infrastructure that carried stolen diplomatic correspondence and financial transaction records from targeted victims.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026