CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 58

As cited

Copy frozen at (site build).

threat intel

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

RustDuck is a two-stage malware family targeting routers, IP cameras, Android boxes, and servers to build a botnet for distributed denial of service (DDoS) attacks. Researchers at QiAnXin's XLab have been tracking the malware since February 2026 and note its rapid evolution. The botnet continues to expand its targeting scope and capabilities.

Why it matters: Organizations operating internet-facing infrastructure, ISPs, and hosting providers need to identify and isolate compromised devices immediately, as the botnet's fast-changing nature suggests active development and expanding attack surface.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

RustDuck is a two-stage malware family targeting routers, IP cameras, Android boxes, and servers to build a botnet for distributed denial of service (DDoS) attacks. Researchers at QiAnXin's XLab have been tracking the malware since February 2026 and note its rapid evolution. The botnet continues to expand its targeting scope and capabilities.

Why it matters: Organizations operating internet-facing infrastructure, ISPs, and hosting providers need to identify and isolate compromised devices immediately, as the botnet's fast-changing nature suggests active development and expanding attack surface.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary