Maxim Zavodchik
Security Research Group Manager
Maxim is a Security Research Group Manager at F5 Networks, leading innovative research of web vulnerabilities and denial of service, evolving threats analysis, attack signature development and product hacking.
Research by Maxim Zavodchik (10)
Article | May 28, 2020
Turing in His Grave: What Human CAPTCHA Solvers Reveal About Control Design
CAPTCHA solver networks that use humans in the developing world to enable large-scale bot attacks demonstrate the need for a new approach to security controls.
13 min read
Article | Dec 18, 2019
Echobot Malware Now up to 71 Exploits, Targeting SCADA
A Mirai variant named Echobot appeared mid-2019. Echobot has been seen expanding its arsenal to 71 exploits, targeting SCADA systems and IoT devices.
8 min read
Article | Mar 13, 2019
“CryptoSink” Campaign Deploys a New Miner Malware
Attackers continue to exploit old vulnerabilities, use new methods to kill competing crypto-miners, and survive removal by administrators.
8 min read
Article | Jan 3, 2018
New Python-Based Crypto-Miner Botnet Flying Under the Radar
A new Python-based botnet that mines Monero spreads via SSH and leverages Pastebin to publish new C&C server addresses.
9 min read
Article | Dec 15, 2017
Zealot: New Apache Struts Campaign Uses EternalBlue and EternalSynergy to Mine Monero on Internal Networks
New Apache Struts campaign, Zealot, targets vulnerabilities in Windows, Linux, and the DotNetNuke CMS, then leverages leaked NSA exploits to move laterally through internal networks and mine Monero.
11 min read
Article | Sep 1, 2017
Wirex Android DDoS Malware Adds UDP Flood
As quickly as attackers commandeer IoT devices to build more “thingbots,” they continue to evolve their attack types and functionality.
4 min read
Article | Mar 27, 2017
From DDoS to Server Ransomware: Apache Struts 2 – CVE-2017-5638 Campaign
A common infection vector used by botnet creators is scanning the Internet for web vulnerabilities to exploit for malware or back doors. The advantage of hitting servers over personal consumer devices is the ability to leverage powerful hardware that is...
9 min read
Article | Feb 25, 2016
Dridex Botnet 220 Campaign: Targeting UK Financials With Webinjects
Like many other financial Trojans, the notorious Dridex malware keeps evolving and strengthening its presence.
5 min read
Article | Oct 10, 2014
Shellshock: Malicious Bash, Obfuscated perlb0t, Echo Probes, and More
Shellshock can take advantage of HTTP headers as well as other mechanisms to enable unauthorized access to Bash.
2 min read
Article | Jul 24, 2014
perlb0t: Still in the Wild with UDP Flood DDoS Attacks
Despite being around since 2005, perlb0t is still being used against unpatched servers.
4 min read
Results 1-10 of 10
Stay up to date with F5 Labs
Get the latest threat intelligence and research delivered to your inbox.