{"id":232941,"date":"2026-04-08T12:30:00","date_gmt":"2026-04-08T16:30:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/04\/08\/masjesu-botnet-emerges-as-ddos-for-hire-service-targeting-global-iot-devices\/"},"modified":"2026-04-09T14:00:11","modified_gmt":"2026-04-09T18:00:11","slug":"masjesu-botnet-emerges-as-ddos-for-hire-service-targeting-global-iot-devices","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/04\/08\/masjesu-botnet-emerges-as-ddos-for-hire-service-targeting-global-iot-devices\/","title":{"rendered":"Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices"},"content":{"rendered":"

Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/04\/masjesu-botnet-emerges-as-ddos-for-hire.html<\/a><\/p>\n

Publish Date: 2026-04-08 12:30:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

\ue804Ravie Lakshmanan<\/span>\ue802Apr 08, 2026<\/span><\/span>IoT Security \/ Network Security<\/span><\/p>\n

Cybersecurity researchers have lifted the curtain on a stealthy botnet that’s designed for distributed denial-of-service (DDoS)\u00a0attacks.<\/p>\n

Called Masjesu<\/strong>, the botnet has been advertised via Telegram as a DDoS-for-hire service since it first surfaced in 2023. It’s capable of targeting a wide range of IoT devices, such as routers and gateways, spanning multiple architectures.<\/p>\n

“Built for persistence and low visibility, Masjesu favors careful, low-key execution over widespread infection, deliberately avoiding blocklisted IP ranges such as those belonging to the Department of Defense (DoD) to ensure long-term survival,” Trellix security researcher Mohideen Abdul Khader\u00a0F said in a Tuesday\u00a0report.<\/p>\n

It’s worth noting that the commercial offering also goes by the moniker XorBot owing to its use of XOR-based encryption to conceal strings, configurations, and payload data. It\u00a0was first documented by Chinese security vendor NSFOCUS in December 2023, linking it to an operator named “synmaestro.”<\/p>\n

A subsequent\u00a0iteration of the botnet observed a year later was found to have added 12 different command injection and code execution exploits to target routers, cameras, DVRs, and NVRs from D-Link, Eir, GPON, Huawei, Intelbras, MVPower, NETGEAR, TP-Link, and Vacron, and obtain initial access. Also\u00a0added were new modules to conduct DDoS flood\u00a0attacks.<\/p>\n

“As an emerging botnet family, XorBot is showing a strong growth momentum, continuously infiltrating and controlling new IoT devices,” NSFOCUS said in November 2024. “Notably, these controllers are increasingly inclined to use social media platforms such as Telegram as the main channels for recruitment and promotion, attracting target ‘customers’ through initial active promotional activities, laying a solid foundation for the subsequent expansion and development of the\u00a0botnet.”<\/p>\n

\"\"<\/p>\n

The latest findings from Trellix show that Masjesu has marketed the ability to carry…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices https:\/\/thehackernews.com\/2026\/04\/masjesu-botnet-emerges-as-ddos-for-hire.html Publish Date: 2026-04-08 12:30:00…<\/p>\n","protected":false},"author":1,"featured_media":232942,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEjVrpJtAgJfASiMYseJhDzJoT1ly7iXa_e_Y_4TBhGIkVGCJ_ZLDM-tGb1Y9NWcOpOcH-xUZUfDiM0fuvUIabEa_5xSbgGjgL8U4FPE99W-V6-oFRAG1ziEZeiJPYrkSZZrwu0jQDjhdUfKsiSxPgZbyZgF1A-cUOqUK3aJpSOQgeSZWogg1X9r77IANDey\/s16000\/ddos-for-hire.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24,29],"class_list":["post-232941","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-network-security"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232941"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=232941"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232941\/revisions"}],"predecessor-version":[{"id":232943,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/232941\/revisions\/232943"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/232942"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=232941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=232941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=232941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}