Trusted Design

Booters with Chinese Characteristics: The Rise of Chinese Online DDoS Platforms

概要

In the past few months, Talos has observed an uptick in the number of Chinese websites offering online DDoS services. Many of these websites have a nearly identical layout and design, offering a simple interface in which the user selects a target’s host, port, attack method, and duration of attack. In addition, the majority of these sites have been registered within the past six months. However, the websites operate under different group names and have different registrants. In addition, Talos has observed administrators of these websites launching attacks on one another. Talos sought to research the actors responsible for creating these platforms and analyze why they have become more prevalent lately.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

China DDoS ELF malware CNC, Panel & exploit scanner distribution (score: 0.61)
HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure (score: 0.61)
New Chinese IoT botnet: Trump Bot (score: 0.61)
DDoS Botnet NK (score: 0.60)
Botnet of mostly Chinese spammer IPs exploiting a webUI (score: 0.60)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 18.08

Matched TTPs:

T1583 - Acquire Infrastructure
T1608.001 - Upload Malware
T1036.004 - Masquerade Task or Service
T1583.006 - Web Services
T1593 - Search Open Websites/Domains
T1102.002 - Bidirectional Communication
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Sea Turtle

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Ember Bear

Score: 7.17

Matched TTPs:

T1583 - Acquire Infrastructure
T1491.002 - External Defacement

MITREへのリンク →

Indrik Spider

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Agrius

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Contagious Interview

Score: 12.83

Matched TTPs:

T1583 - Acquire Infrastructure
T1608.001 - Upload Malware
T1583.006 - Web Services
T1593 - Search Open Websites/Domains
T1566.003 - Spearphishing via Service

MITREへのリンク →

Sandworm Team

Score: 22.98

Matched TTPs:

T1583 - Acquire Infrastructure
T1491.002 - External Defacement
T1608.001 - Upload Malware
T1584.005 - Botnet
T1593 - Search Open Websites/Domains
T1102.002 - Bidirectional Communication
T1499 - Endpoint Denial of Service

MITREへのリンク →

Star Blizzard

Score: 8.29

Matched TTPs:

T1583 - Acquire Infrastructure
T1608.001 - Upload Malware
T1593 - Search Open Websites/Domains

MITREへのリンク →

APT41

Score: 9.51

Matched TTPs:

T1568.002 - Domain Generation Algorithms
T1036.004 - Masquerade Task or Service
T1102.001 - Dead Drop Resolver

MITREへのリンク →

TA551

Score: 4.13

Matched TTPs:

T1568.002 - Domain Generation Algorithms

MITREへのリンク →

HAFNIUM

Score: 13.61

Matched TTPs:

T1583.005 - Botnet
T1584.005 - Botnet
T1583.006 - Web Services
T1550.001 - Application Access Token

MITREへのリンク →

APT5

Score: 3.84

Matched TTPs:

T1583.005 - Botnet

MITREへのリンク →

Ke3chang

Score: 7.28

Matched TTPs:

T1583.005 - Botnet
T1036.002 - Right-to-Left Override

MITREへのリンク →

TA2541

Score: 3.99

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services

MITREへのリンク →

Earth Lusca

Score: 9.37

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1584.006 - Web Services
T1189 - Drive-by Compromise

MITREへのリンク →

Mustang Panda

Score: 11.40

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1593 - Search Open Websites/Domains
T1027.007 - Dynamic API Resolution

MITREへのリンク →

Mustard Tempest

Score: 8.28

Matched TTPs:

T1608.001 - Upload Malware
T1189 - Drive-by Compromise
T1608.006 - SEO Poisoning

MITREへのリンク →

OilRig

Score: 4.50

Matched TTPs:

T1608.001 - Upload Malware
T1566.003 - Spearphishing via Service

MITREへのリンク →

LazyScripter

Score: 3.99

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services

MITREへのリンク →

Gamaredon Group

Score: 15.05

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services
T1102.003 - One-Way Communication
T1001 - Data Obfuscation
T1102.002 - Bidirectional Communication

MITREへのリンク →

Threat Group-3390

Score: 3.74

Matched TTPs:

T1608.001 - Upload Malware
T1189 - Drive-by Compromise

MITREへのリンク →

BITTER

Score: 4.07

Matched TTPs:

T1608.001 - Upload Malware
T1036.004 - Masquerade Task or Service

MITREへのリンク →

APT32

Score: 7.85

Matched TTPs:

T1608.001 - Upload Malware
T1036.004 - Masquerade Task or Service
T1583.006 - Web Services
T1189 - Drive-by Compromise

MITREへのリンク →

HEXANE

Score: 4.37

Matched TTPs:

T1608.001 - Upload Malware
T1102.002 - Bidirectional Communication

MITREへのリンク →

Saint Bear

Score: 3.99

Matched TTPs:

T1608.001 - Upload Malware
T1583.006 - Web Services

MITREへのリンク →

Moonstone Sleet

Score: 4.50

Matched TTPs:

T1608.001 - Upload Malware
T1566.003 - Spearphishing via Service

MITREへのリンク →

FIN7

Score: 8.48

Matched TTPs:

T1608.001 - Upload Malware
T1036.004 - Masquerade Task or Service
T1583.006 - Web Services
T1102.002 - Bidirectional Communication

MITREへのリンク →

EXOTIC LILY

Score: 4.50

Matched TTPs:

T1608.001 - Upload Malware
T1566.003 - Spearphishing via Service

MITREへのリンク →

MoustachedBouncer

Score: 4.54

Matched TTPs:

T1659 - Content Injection

MITREへのリンク →

Ferocious Kitten

Score: 3.44

Matched TTPs:

T1036.002 - Right-to-Left Override

MITREへのリンク →

BlackTech

Score: 3.44

Matched TTPs:

T1036.002 - Right-to-Left Override

MITREへのリンク →

Scarlet Mimic

Score: 3.44

Matched TTPs:

T1036.002 - Right-to-Left Override

MITREへのリンク →

BRONZE BUTLER

Score: 8.49

Matched TTPs:

T1036.002 - Right-to-Left Override
T1189 - Drive-by Compromise
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Carbanak

Score: 4.49

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1102.002 - Bidirectional Communication

MITREへのリンク →

Winter Vivern

Score: 7.48

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1584.006 - Web Services
T1189 - Drive-by Compromise

MITREへのリンク →

Wizard Spider

Score: 6.23

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1552.006 - Group Policy Preferences

MITREへのリンク →

FIN6

Score: 4.62

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1566.003 - Spearphishing via Service

MITREへのリンク →

PROMETHIUM

Score: 3.86

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1189 - Drive-by Compromise

MITREへのリンク →

ZIRCONIUM

Score: 6.51

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1583.006 - Web Services
T1102.002 - Bidirectional Communication

MITREへのリンク →

Magic Hound

Score: 14.42

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1036.010 - Masquerade Account Name
T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

Lazarus Group

Score: 14.93

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1189 - Drive-by Compromise
T1027.007 - Dynamic API Resolution
T1566.003 - Spearphishing via Service

MITREへのリンク →

Axiom

Score: 5.39

Matched TTPs:

T1584.005 - Botnet
T1189 - Drive-by Compromise

MITREへのリンク →

Volt Typhoon

Score: 6.91

Matched TTPs:

T1584.005 - Botnet
T1593 - Search Open Websites/Domains

MITREへのリンク →

Turla

Score: 9.80

Matched TTPs:

T1583.006 - Web Services
T1584.006 - Web Services
T1102.002 - Bidirectional Communication
T1189 - Drive-by Compromise

MITREへのリンク →

MuddyWater

Score: 4.41

Matched TTPs:

T1583.006 - Web Services
T1102.002 - Bidirectional Communication

MITREへのリンク →

APT28

Score: 14.85

Matched TTPs:

T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1189 - Drive-by Compromise
T1498 - Network Denial of Service
T1550.001 - Application Access Token

MITREへのリンク →

APT29

Score: 9.07

Matched TTPs:

T1583.006 - Web Services
T1090.004 - Domain Fronting
T1566.003 - Spearphishing via Service

MITREへのリンク →

POLONIUM

Score: 4.41

Matched TTPs:

T1583.006 - Web Services
T1102.002 - Bidirectional Communication

MITREへのリンク →

APT33

Score: 4.13

Matched TTPs:

T1552.006 - Group Policy Preferences

MITREへのリンク →

Leviathan

Score: 5.90

Matched TTPs:

T1102.003 - One-Way Communication
T1189 - Drive-by Compromise

MITREへのリンク →

CURIUM

Score: 7.91

Matched TTPs:

T1584.006 - Web Services
T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

APT37

Score: 4.16

Matched TTPs:

T1102.002 - Bidirectional Communication
T1189 - Drive-by Compromise

MITREへのリンク →

LAPSUS$

Score: 4.13

Matched TTPs:

T1578.002 - Create Cloud Instance

MITREへのリンク →

Scattered Spider

Score: 4.13

Matched TTPs:

T1578.002 - Create Cloud Instance

MITREへのリンク →

Storm-1811

Score: 6.14

Matched TTPs:

T1036.010 - Masquerade Account Name
T1566.003 - Spearphishing via Service

MITREへのリンク →

Dragonfly

Score: 5.39

Matched TTPs:

T1036.010 - Masquerade Account Name
T1189 - Drive-by Compromise

MITREへのリンク →

APT3

Score: 3.62

Matched TTPs:

T1036.010 - Masquerade Account Name

MITREへのリンク →

RTM

Score: 5.05

Matched TTPs:

T1189 - Drive-by Compromise
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Windshift

Score: 4.29

Matched TTPs:

T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

Dark Caracal

Score: 4.29

Matched TTPs:

T1189 - Drive-by Compromise
T1566.003 - Spearphishing via Service

MITREへのリンク →

Patchwork

Score: 5.05

Matched TTPs:

T1189 - Drive-by Compromise
T1102.001 - Dead Drop Resolver

MITREへのリンク →

Rocke

Score: 3.29

Matched TTPs:

T1102.001 - Dead Drop Resolver

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Sandworm Team

Score: 0.82

Matched TTPs:

T1583 - Acquire Infrastructure
T1102.002 - Bidirectional Communication
T1499 - Endpoint Denial of Service
T1584.005 - Botnet
T1608.001 - Upload Malware
T1593 - Search Open Websites/Domains
T1491.002 - External Defacement

MITREへのリンク →

Kimsuky

Score: 0.66

Matched TTPs:

T1583 - Acquire Infrastructure
T1583.006 - Web Services
T1102.001 - Dead Drop Resolver
T1102.002 - Bidirectional Communication
T1036.004 - Masquerade Task or Service
T1608.001 - Upload Malware
T1593 - Search Open Websites/Domains

MITREへのリンク →

Lazarus Group

Score: 0.57

Matched TTPs:

T1583.006 - Web Services
T1027.007 - Dynamic API Resolution
T1102.002 - Bidirectional Communication
T1566.003 - Spearphishing via Service
T1189 - Drive-by Compromise
T1036.004 - Masquerade Task or Service

MITREへのリンク →

Gamaredon Group

Score: 0.55

Matched TTPs:

T1583.006 - Web Services
T1102.002 - Bidirectional Communication
T1001 - Data Obfuscation
T1608.001 - Upload Malware
T1102.003 - One-Way Communication

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る