Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption

Dysphoria, a tracked IoT botnet, has implemented blockchain-based name services and relays using infected devices. This change occurred after a law-enforcement operation in March targeted JackSkid infrastructure. The new design is reportedly more resilient to disruption. Researchers from CNCERT, China's national computer emergency response team, and XLab, a threat-intelligence lab, have been monitoring Dysphoria. The botnet's updated architecture is intended to make it more difficult to disable. The modifications suggest an effort to enhance the botnet's persistence and evade future disruption attempts.