At least 1,200 Redis database servers worldwide have been corralled into a botnet using an «elusive and severe threat» dubbed HeadCrab since early September 2021.
«This advanced threat actor utilizes a state-of-the-art, custom-made malware that is undetectable by agentless and traditional anti-virus solutions to compromise a large number of Redis servers,» Aqua security researcher Asaf Eitani