SECURITYCYBERSCOOP
CrowdStrike disrupts Glassworm botnet that preyed on open-source supply chain
CrowdStrike, with assistance from Google and Shadowserver, dismantled the Glassworm botnet, which had infected hundreds of open-source software packages since 2025. The operation disrupted four attacker-controlled servers and infrastructure layers, including Solana blockchain, BitTorrent, and Google Calendar, to halt malware distribution and credential theft.
Mentioned
Related Signal
Adjacent reporting
- Glassworm botnet disrupted after resilient C2 infrastructure takedown
- Kimwolf Botnet Swamps Anonymity Network I2P
- GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
- Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
- Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack
- FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown