CrowdStrike and partners disrupt Glassworm botnet

Source:The Register

02 — Who / Subject

CrowdStrike, Google, Shadowserver Foundation

03 — Where / Locus

Global

04 — When / Temporality

May 27, 2026

Verified: May 27, 2026

05 — Why / Core Summary

"CrowdStrike, Google, and Shadowserver Foundation dismantled the Glassworm botnet. The worm targeted developers via poisoned software packages and VS Code extensions. The botnet used blockchain, Google Calendar, and BitTorrent DHT for C2 infrastructure."

Conflict Analysis

2 sources have verified this fact, increasing its reliability.

Recommended Background Resource

Affiliate / AdAI Curation

Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers

Author: Andy Greenberg

This book provides a deep dive into the evolution of sophisticated botnets and state-sponsored cyber warfare, offering crucial context on how modern threat actors exploit software supply chains and infrastructure to maintain persistence.

Explore Background Book (Amazon)

As an Amazon Associate, COMPAMIR earns from qualifying purchases.

Post