Steadily Growing Fodcha Botnet Specializes in DDoS Attacks

The Fodcha Botnet is a new malicious project that appears to be growing steadily, adding a little over 100 infected devices per day. This botnet is not affiliated with the infamous Mirai Botnet family, but it does also focus on Distributed-Denial-of-Service (DDoS) attacks exclusively. The criminals behind the Fodcha Botnet are infecting a wide range of routers, DV and other Internet-connected devices. The infection vectors they rely on are mostly older vulnerabilities, which are still present in devices with outdated firmware.

The bots part of the Fodcha Botnet appear to be mostly situated in China, which implies that this is the primary region that the criminals are going after. Currently, the Fodcha Botnet has over 62,000 active infections but, as mentioned earlier, the number keeps growing daily.

In addition to abusing older vulnerabilities, the Fodcha Botnet also employs a brute-force cracking tool to try and guess the passwords of its targets. This strategy could work since many users underestimate the importance of strong security credentials and end up using weak passwords for their routers. The Fodcha Botnet undergoes regular updates, but it is yet to be used in high-profile DDoS attacks. However, judging by the steady growth of the project, it is safe to assume that it will not be long before the Fodcha Botnet is weaponized fully.