A botnet exploited vulnerabilities in SPF DNS record configurations, compromising 13,000 MikroTik devices and spoofing around 20,000 web domains to spread malware. The result was a widespread spoofing attack carrying malware-laden attachments. It is recommended to avoid permissive SPF configurations, regularly check DNS records, and use Hosted SPF services with Macros in order to prevent such attacks.

North Korea-linked hackers target developers via GitHub – SecurityBrief Australia
North Korea-linked hackers target developers via GitHub SecurityBrief Australia


