When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
Black Lotus says that roughly 7,000 new endpoints are being added to the botnet every week.
They are located all over the world, so no specific geography seems to be preferred.
Other methods of breaching the devices include brute-force attacks and credential stuffing.
Among the groups using Faceless are IcedID and SolarMarker.
A third of infections last more than 50 days, while roughly 15% get eliminated within two days.
