Dysphoria changes architecture: botnet moves to blockchain C2 and IoT relays

Colleagues, I’d like to flag a cybersecurity update: the Dysphoria botnet, linked to the JackSkid lineage, has significantly hardened its architecture following a recent law enforcement operation.

According to researchers, it has moved to blockchain-based name services and uses infected devices as relays for C2 communications.

This reduces the impact of server takedowns and makes the infrastructure less visible.

At the same time, the command source still depends on blockchain records, available nodes, and compromised IoT devices.

Why this matters: defenses still hinge on patching, replacing legacy devices, eliminating weak passwords, and disabling unnecessary remote access.

Have you already reviewed IoT security across your network?

#cybersecurity #IoT #botnet #ThreatIntelligence