#threat-intel

Analysis · May 28, 2026 · Colten Anderson

GlassWorm's botnet is down, but the technique it proved still works

CrowdStrike, Google, and Shadowserver knocked out all four C2 channels at once. That ends the infrastructure, not the playbook. Three primitives outlive the takedown.