Mapping a Botnet by Its Back End: 1,001 IPs Across 64 Countries

The post describes the discovery of a botnet consisting of 1,001 IP addresses spread across 306 networks and 64 countries. These IPs are linked to eight shared staging servers and share a unique TLS and HTTP fingerprint not found elsewhere. Additionally, smaller botnets were identified as distinct, separate clusters.