We recently sinkholed a DDoS #botnet of 200,000 compromised Android TV boxes infected with #CECbot malware 🕵️‍♀️. Shortly after, the threat actor responded by registering a rather specific botnet C2 domain 👇 📡 spamhaushackers .at Nice try, but their new C2 domain is already flagged🛑. Its authoritative DNS runs on DNSPod (*.dnspod.com), which has carried a poor reputation for years! 💡 ⤵️⤵️⤵️⤵️ https://hunting.abuse.ch/hunt/6aa7e82c00a16/spamhaushackers.at/#sia