Sality P2P botnet infrastructure seized in international takedown

Wed, 02 Sep 2026 15:05:08 +0000

Engineer — Skip
SOC/IR — Learn: Sality has been a persistent Windows endpoint threat for years; the C2 sinkholing creates a window to identify residual infections in your estate, but no IOCs or TTPs are provided in this summary to act on directly.
Leader — Learn: A notable coordinated takedown of a long-running global botnet, useful context for board-level situational awareness on law enforcement effectiveness, but no organizational action is required.

Sality on CuraSec