Glassworm Takedown: How CrowdStrike, Google, and Shadowserver Killed the “Unkillable” Developer Botnet
Yesterday at 14:00 UTC, CrowdStrike, Google, and the Shadowserver Foundation simultaneously struck all four C2 channels of the Glassworm botnet — including a Solana blockchain wallet takeover and BitTorrent DHT eclipse attack. The botnet the security community called unkillable is silent. ZOMBI is still running on infected machines and 18 months of stolen credentials remain in attacker hands.