Chinese government-backed hackers are using a botnet, made up of over 16,000 compromised routers and other devices, to conduct advanced password spray attacks on Microsoft’s Azure cloud service users. The botnet, known as CovertNetwork-1658, is particularly dangerous due to its evasiveness and large-scale operation, making the potential for account compromise high.

GitHub hit by a sophisticated malware campaign as ‘Banana Squad’ mimics popular repos
The repository names are identical to other repositories, indicating typo-squatting. These repositories also contain search keywords and emojis, signifying potential AI use. ReversingLabs warns developers