Jackskid - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/jackskid/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 13:29:13 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgJackskid botnet command-and-control infrastructurehttps://feed.craftedsignal.io/briefs/2026-11-jackskid-c2/Thu, 05 Nov 2026 13:29:13 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-jackskid-c2/ThreatFox has identified 8 new C2 server indicators associated with the Jackskid botnet, a Mirai-based variant utilized for DDoS attacks.ThreatFox reported 8 new indicators of compromise for the Jackskid (elf.jackskid) botnet. The indicators consist of IP addresses communicating over port 443, suggesting an attempt to masquerade command-and-control traffic as standard HTTPS. Jackskid is a known variant of the Mirai malware family used primarily for distributed denial-of-service (DDoS) operations.

Recommendation

  • Block the identified C2 IP addresses at the perimeter firewall and egress proxy.
  • Implement network monitoring to detect outbound connections from internal assets to these specific IP addresses on port 443.
  • Review historical logs for any existing connections to the provided IOCs to identify potentially compromised internal endpoints.
]]>mediumadvisorybotnetddosmiraijackskidnetwork-security