Malware
Dysphoria
- First Reported
- Jul 27, 2026
- Latest Reported
- Aug 31, 2026
Reported Context (3)
- Botnets and loaders like Dysphoria, Aeternum, and ToxNetV2 used blockchain, AI, and decentralized C2 methods. ThreatsDay Roundup: 296,000-Device IoT Botnet, 100+ Water Systems Targeted, SharePoint Flaws Probed
- Dysphoria is a fast-evolving botnet that has compromised about 200,000 devices worldwide and is being used for DDoS attacks and proxy relay operations. Dysphoria Botnet Reaches an Estimated 200,000 Devices, Uses Blockchain-Based C2
- Dysphoria is an IoT botnet line that evolved after the March takedown of JackSkid infrastructure, using blockchain-based name services and infected-device relays to make disruption more difficult. Dysphoria IoT Botnet Uses Blockchain C2 and Infected-Device Relays
CVE (8)
Malware (13)
People (1)
Threat Actors (3)
MITRE ATT&CK (18)
Vendors (7)
Products (6)
Tools (3)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
