KamasersMalware
Kamasers is a DDOS botnet. The bot has backdoor capabilities as it connects to an attacker controller C2 server. This allows it to download files, receive commands, and execute files, allowing it to perform HTTP and DNS flooding attacks. The bot is also used to access sensitive files.From MISP Galaxy
Last reported 1 month ago, by ANY.RUN1 report
ATT&CK techniques
4 techniques · each with the sentence it comes from- T1176.001Browser Extensions
“Monitor for unexpected code-signing chains and the installation of IDE or browser extensions from non-standard or newly appeared sources.”
- T1219Remote Access Tools
“Detection logic should hunt for repetitive RMM and remote access tools, archive or installer abuse, and cross-OS exfiltration patterns.”
- T1553.002Code Signing
“Monitor for unexpected code-signing chains and the installation of IDE or browser extensions from non-standard or newly appeared sources.”
- T1684Social Engineering
“Read more: ClickFix Explosion: Cross-Platform Social Engineering Turns Users Into Malware Installers”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
6 Months on Alert: Get H1 2026 Cyber Risk Report for SOCs and MSSPs“Read more: Kamasers: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide”
Thanks — we review every report.