….and please watch our latest music video “The Monster Song” youtu.be/UgCucddbx-Y?...
badcandy - "The Monster Song" (Official Video)
YouTube video by badcandy
youtu.be
January 22, 2025 at 12:33 AM
….and please watch our latest music video “The Monster Song” youtu.be/UgCucddbx-Y?...
We also have an animated video podcast where you can enjoy the cartoon faces of our beloved hosts as they eat the cartoon gummy face of Shaq. This one's double cursed! youtu.be/SGDWUbY6ZDw
Dogg Zzone 9000 - Episode 211, BADCANDY with Mark Mahoney
YouTube video by 1-900-HOTDOG
youtu.be
January 22, 2025 at 4:28 PM
We also have an animated video podcast where you can enjoy the cartoon faces of our beloved hosts as they eat the cartoon gummy face of Shaq. This one's double cursed! youtu.be/SGDWUbY6ZDw
"Don’t take BADCANDY from strangers ..."
The Australian Signals Directorate (ASD) recently published an advisory on the BadCandy implant still present in many Cisco IOS XE devices: www.cyber.gov.au/about-us/vie...
We still see around 15 000 Cisco IOS XE devices with the implant
The Australian Signals Directorate (ASD) recently published an advisory on the BadCandy implant still present in many Cisco IOS XE devices: www.cyber.gov.au/about-us/vie...
We still see around 15 000 Cisco IOS XE devices with the implant
November 3, 2025 at 8:30 PM
"Don’t take BADCANDY from strangers ..."
The Australian Signals Directorate (ASD) recently published an advisory on the BadCandy implant still present in many Cisco IOS XE devices: www.cyber.gov.au/about-us/vie...
We still see around 15 000 Cisco IOS XE devices with the implant
The Australian Signals Directorate (ASD) recently published an advisory on the BadCandy implant still present in many Cisco IOS XE devices: www.cyber.gov.au/about-us/vie...
We still see around 15 000 Cisco IOS XE devices with the implant
December 2, 2024 at 3:35 PM
The Australian government is warning about ongoing cyberattacks against unpatched Cisco IOS XE devices in the country to infect routers with the BadCandy webshell.
Australia warns of ‘BadCandy’ infections on unpatched Cisco devices
The Australian government is warning about ongoing cyberattacks against unpatched Cisco IOS XE devices in the country to infect routers with the BadCandy webshell.
www.bleepingcomputer.com
October 31, 2025 at 3:39 PM
The Australian government is warning about ongoing cyberattacks against unpatched Cisco IOS XE devices in the country to infect routers with the BadCandy webshell.
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
thehackernews.com
November 1, 2025 at 5:00 PM
ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability
UPDATE: Cisco IOS XE Web UI CVE-2023-20198 version 3 BadCandy implant detection scans up and running (hat tip to LeakIX).
Total implant detections at around 26.5K unique IPs.
Dashboard tracker: dashboard.shadowserver.org/statistics/c...
Total implant detections at around 26.5K unique IPs.
Dashboard tracker: dashboard.shadowserver.org/statistics/c...
November 6, 2023 at 10:12 AM
UPDATE: Cisco IOS XE Web UI CVE-2023-20198 version 3 BadCandy implant detection scans up and running (hat tip to LeakIX).
Total implant detections at around 26.5K unique IPs.
Dashboard tracker: dashboard.shadowserver.org/statistics/c...
Total implant detections at around 26.5K unique IPs.
Dashboard tracker: dashboard.shadowserver.org/statistics/c...
UPDATE: Cisco IOS XE CVE-2023-20198 version 2 BadCandy implant detection has dropped 2023-11-03: dashboard.shadowserver.org/statistics/c...
Note on 2023-11-02 Cisco updated their threat advisory on CVE-2023-20198/BadCandy with observations of a version 3: blog.talosintelligence.com/active-explo...
Note on 2023-11-02 Cisco updated their threat advisory on CVE-2023-20198/BadCandy with observations of a version 3: blog.talosintelligence.com/active-explo...
November 4, 2023 at 8:28 PM
UPDATE: Cisco IOS XE CVE-2023-20198 version 2 BadCandy implant detection has dropped 2023-11-03: dashboard.shadowserver.org/statistics/c...
Note on 2023-11-02 Cisco updated their threat advisory on CVE-2023-20198/BadCandy with observations of a version 3: blog.talosintelligence.com/active-explo...
Note on 2023-11-02 Cisco updated their threat advisory on CVE-2023-20198/BadCandy with observations of a version 3: blog.talosintelligence.com/active-explo...
Please follow my band badcandy on Spotify open.spotify.com/artist/7FrIC...
badcandy
Artist · 37 monthly listeners.
open.spotify.com
January 22, 2025 at 12:32 AM
Please follow my band badcandy on Spotify open.spotify.com/artist/7FrIC...
Attackers targeting unpatched Cisco kit notice malware implant removal, install it again
Attackers targeting unpatched Cisco kit notice malware implant removal, install it again
PLUS: Cyber-exec admits selling secrets to Russia; LastPass isn't checking to see if you're dead; Nation-state backed Windows malware; and more
Infosec in brief Australia’s Signals Directorate (ASD) last Friday warned that attackers are installing an implant named “BADCANDY” on unpatched Cisco IOS XE devices and can detect deletion of their wares and reinstall their malware.…
dlvr.it
November 2, 2025 at 11:37 PM
Attackers targeting unpatched Cisco kit notice malware implant removal, install it again
-Couple loses fortune to scammers
-Valid accounts still rule the day for initial access
-Open VSX rotate leaked creds
-ZeroAccess botnet dev is now a software dev
-BadCandy flourishes in Australia
-New Katreus miner
-Malware reports on Aura Stealer, SectopRAT, SleepyDuck RAT, OysterLoader
-Valid accounts still rule the day for initial access
-Open VSX rotate leaked creds
-ZeroAccess botnet dev is now a software dev
-BadCandy flourishes in Australia
-New Katreus miner
-Malware reports on Aura Stealer, SectopRAT, SleepyDuck RAT, OysterLoader
November 3, 2025 at 9:32 AM
-Couple loses fortune to scammers
-Valid accounts still rule the day for initial access
-Open VSX rotate leaked creds
-ZeroAccess botnet dev is now a software dev
-BadCandy flourishes in Australia
-New Katreus miner
-Malware reports on Aura Stealer, SectopRAT, SleepyDuck RAT, OysterLoader
-Valid accounts still rule the day for initial access
-Open VSX rotate leaked creds
-ZeroAccess botnet dev is now a software dev
-BadCandy flourishes in Australia
-New Katreus miner
-Malware reports on Aura Stealer, SectopRAT, SleepyDuck RAT, OysterLoader
Hundreds of Australian Devices Compromised with BadCandy Implant
Hundreds Of Australian Devices Compromised With BadCandy Implant - The Cyber Express
Australian cyber agency has issued a critical advisory warning that over 150 devices in Australia remain compromised with the BadCandy implant as of late
thecyberexpress.com
October 31, 2025 at 12:28 PM
Hundreds of Australian Devices Compromised with BadCandy Implant
heres some more art of him + his ref sheet :-P (creds to @burning_nettle9 on twt and @badcandy on tumblr respectively for the last 2 pics)
October 22, 2024 at 11:58 AM
heres some more art of him + his ref sheet :-P (creds to @burning_nettle9 on twt and @badcandy on tumblr respectively for the last 2 pics)
SANS Stormcast Monday, November 3rd, 2025: Port 8530/8531 Scans; BADCANDY Webshells; Open VSX Security Improvements
https://isc.sans.edu/podcastdetail/9682
https://isc.sans.edu/podcastdetail/9682
November 3, 2025 at 3:30 AM
SANS Stormcast Monday, November 3rd, 2025: Port 8530/8531 Scans; BADCANDY Webshells; Open VSX Security Improvements
https://isc.sans.edu/podcastdetail/9682
https://isc.sans.edu/podcastdetail/9682