[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP2v57opVAem8X-ZdjFMCKI5V-xPPhvPq8ODQfDs4cbg":3},{"article":4,"iocs":54,"watch_terms":58,"solutions":59,"lesson":154},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"52da4889-bd2c-4505-9e0a-b23a5c8c3a04","PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem","poellm-malware-has-assembled-a-sweeping-botnet-taking-technical-cues-from-a-poem-463d70","More than 3,400 servers have been compromised by malware that hides its infrastructure coordinates in a poem. The post PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem appeared first on CyberScoop.","A novel malware strain named PoeLLM has compromised over 3,400 servers by exploiting open-source AI services. The malware's command-and-control (C2) infrastructure is ingeniously hidden within a poem hosted on GitHub, making it difficult for security researchers to detect. Threat actors can update the C2 addresses by altering the poem without needing to modify the malware itself, significantly enhancing its resilience.","PoeLLM malware uses a poem to hide C2 infrastructure, compromising over 3,400 servers.","https:\u002F\u002Fcyberscoop.com\u002Fpoellm-malware-botnet-poem-lumen-black-lotus-labs\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2019\u002F12\u002FGettyImages-1188634858.jpg","2026-10-07T15:00:00+00:00","2026-10-07T16:00:24.301453+00:00",8,[17,20,22,24,26,28],{"name":18,"type":19},"Sentry","product",{"name":21,"type":19},"LiteLLM",{"name":23,"type":19},"Ollama",{"name":25,"type":19},"Gotenberg",{"name":27,"type":19},"Gitea",{"name":29,"type":30},"Ivanti","vendor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":31,"icon":33,"name":34,"slug":35},null,"Malware","malware",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55],{"type":35,"value":56,"context":57},"PoeLLM","Name of the malware strain",[29,18,21],{"controls":60,"vendors":148},[61,90,119],{"slug":62,"name":63,"problem":64,"products":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":91,"name":92,"problem":93,"products":94},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[95,103,111],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":120,"name":121,"problem":122,"products":123},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[124,132,140],{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",[149],{"slug":150,"name":29,"logo_path":151,"roles":152},"ivanti","\u002Fvendor-logos\u002Fivanti.png",[153],"affected",{"slug":155,"title":156,"body":157,"framework_refs":158,"framework_notes":169},"poellm-botnet-hides-c2-infrastructure-in-github-poem-to-evade-detection","PoeLLM Botnet Hides C2 Infrastructure in GitHub Poem to Evade Detection","The PoeLLM malware exploited publicly exposed, improperly secured open-source AI services to compromise over 3,400 servers, demonstrating the danger of deploying AI tools with default or insufficient configurations. By embedding its command-and-control addresses inside a poem hosted on GitHub, the threat actors leveraged a legitimate, trusted platform as a covert channel — a technique known as 'living off trusted sites' (LOTS) — making traditional domain-based blocking ineffective. This approach allows attackers to update C2 infrastructure dynamically without touching the malware binary itself, dramatically increasing operational resilience and longevity. The incident highlights that novel services, especially AI-facing ones, are increasingly targeted precisely because security monitoring and hardening practices haven't caught up with their rapid adoption.",[159,160,161,162,163,164,165,166,167,168],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 7: Continuous Vulnerability Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 SI-3: Malicious Code Protection","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 AU-6: Audit Record Review, Analysis, and Reporting","NIST CSF DE.CM-1: Network Monitoring","MITRE ATT&CK T1102: Web Service (C2 via Trusted Platform)","MITRE ATT&CK T1059: Command and Scripting Interpreter",{}]