Remus - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/remus/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 13:39:45 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgRemus Botnet: New command and control infrastructurehttps://feed.craftedsignal.io/briefs/2026-11-remus-c2-indicators/Thu, 05 Nov 2026 13:39:45 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-remus-c2-indicators/ThreatFox identified four new URL indicators associated with the Remus malware family used for command and control communication.ThreatFox has reported four new URLs associated with the Remus malware family, observed on November 4, 2026. These indicators are identified as botnet command and control (C2) servers.

Recommendation

  • Block traffic to the listed URLs at the perimeter firewall and web proxy.
  • Monitor network logs for outbound connections to the specified hostnames and ports.
  • Investigate hosts that have successfully established connections to these C2 endpoints for potential compromise.
]]>mediumadvisoryremusbotnetc2