Bondnet is a threat actor. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Bondnet exploit?

Specific CVE exploitation data for Bondnet is being tracked. Check the Strobes VI threat actor profile for updates.

Bondnet

Exploited CVEs

Overview

Bondnet is a threat actor that deploys backdoors and cryptocurrency miners. They use high-performance bots as C2 servers and configure reverse RDP environments on compromised systems. Bondnet has infected over 15,000 Windows server machines worldwide, primarily targeting Windows Server 2008 R2 systems. The botnet is used for mining cryptocurrencies like Monero, ByteCoin, RieCoin, and ZCash, potentially earning the operator thousands of dollars per day.

Exploited Vulnerabilities

No exploited CVEs have been attributed to this threat actor yet.

Browse CVE Database