Bitsight Blog
bitsight.com · Company blog · on HN since 2021
Bitsight, a cybersecurity ratings company, publishes research on botnets, exposed devices, DDoS attacks, vulnerabilities and security incidents.
What HN saysHN commenters link it as source material for incident analyses, including the Mylobot botnet, a DDoS attack investigation and an ad fraud operation.
20HN people shared it
6linked it in comments
18stories submitted
149story points
3 months agolast shared
2021people per year2026
Most-shared posts
- 1Bitsight Identifies Security Cameras Accessible on the Internet3 people · 16 points · first shared 2025 · discussion on HN
- 2Mylobot: Investigating a Proxy Botnet3 people · 2 points · first shared 2023 · discussion on HN
- 3Critical Vulnerabilities Discovered in Automated Tank Gauge Systems2 people · 6 points · first shared 2024 · discussion on HN
- 4Identifying thousands of organizations using Internet-facing and exposed webcams2 people · 3 points · first shared 2023 · 1 comments on HN
- 5CrowdStrike Timeline Mystery1 people · 87 points · first shared 2024 · 28 comments on HN
- 6The Impact of the Kaspersky Ban1 people · 22 points · first shared 2024 · 78 comments on HN
- 7RapperBot: From Infection to DDoS in a Split Second1 people · 4 points · first shared 2025 · 1 comments on HN
- 8Nearly 100k exposed industrial control systems (ICS)1 people · 2 points · first shared 2023 · 2 comments on HN
- 9The Aftermath of the Kaspersky Ban1 people · 2 points · first shared 2024 · discussion on HN
- 10Evidence-Based Strategies to Lower Your Risk of Becoming a Ransomware Victim1 people · 2 points · first shared 2021 · discussion on HN
- 11Reflective DoS amplification attack via SLP1 people · 1 points · first shared 2023 · 1 comments on HN
- 12MongoBleed: Unauthenticated memory-read vulnerability in MongoDB1 people · 1 points · first shared 2025 · 1 comments on HN
- 13DDoS abusing SLP protocols on the rise1 people · 1 points · first shared 2023 · 1 comments on HN
- 14Massive ddos cyber fog1 people · first shared 2025
- 15Apple vulnerabilities cisa known exploited vulnerabilities1 people · first shared 2024
What HN people wrote when they linked it
Doohickey-d · 2026-07-30
Krebs' blog is nice, but quite often it's just re-reporting stuff from somewhere else:
Original with more details: https://www.bitsight.com/blog/fuyao-enterprise-building-ad-fraud-empir…
yoloman2 · 2025-03-15
So it seems neither traffic came from Ukraine nor Dark Storm was probably behind the attack. The plot thickens!
https://www.bitsight.com/blog/massive-ddos-cyber-fog
nonplus · 2024-08-22
That question seems like it has to be framed in a misunderstanding of how secure you believe the iOS platform is. Here's a list of CVEs for iOS just this year: https://www.bitsight.com/blog/apple-vulnerabilities-cisa-known-exploit…
If you went back farther, you would find exploits that compromise your iOS device simply by receiving a compromised jpg image, not even by you opening the message. https://arstechnica.com/gadgets/2023/09/apple-patches-clickless-0-day-…
I think the expectation in 2024 should simply be 0 day exploits are available for purchase that target both platforms, neither is secure.
Lerc · 2024-07-24
This image at https://www.bitsight.com/sites/default/files/2024/07/23/Unique%20IPs%2… makes a compelling argument that something happened concurrently with the third set of weekday peaks. Although considering how similar each peak was for the first two weeks I would say the divergence was earlier than the dotted line where the short sharp peak appeared.
Something happened, the nature of that something might be unrelated to the BSOD crash. Could just be another piece of software doing an update at a different frequency that sometimes changes the timing of the crowdstrike update.
You'd need a longer term view of data searching for beat patterns to detect that.
If the something was a one-off effect, like admins taking sick days to watch the Euro final, I'm not sure how you could positively identify the cause.
dirheist · 2023-04-03
IIRC the mylobot botnet is responsible for providing the vast majority of residential (home) IP addresses for residential VPN providers (who are then sold to expressvpn/nordvpn). The whole business is incredibly shady and nefarious and nordvpn/expressvpn must know from whom they contract their residential vpn services from.
BHProxies is the largest residential proxy provider on the internet and almost all of their proxies are acquired through the botnet above.
https://www.bitsight.com/blog/mylobot-investigating-proxy-botnet
cf100clunk · 2022-07-19
Direct link to the Bitsight report:
https://www.bitsight.com/press-releases/bitsight-discovers-critical-vu…