OTX Threat: RustDuck: An In-Depth Analysis of a Two-Stage Botnet

Since February 2026, a new malware family utilizing a Loader plus Core two-stage architecture has been detected, primarily conducting large-scale DDoS attacks with strong cross-platform capabilities. The family is transitioning from C to Rust programming language, demonstrating rapid evolution in anti-defense and traffic encryption techniques. Propagation methods include weak password brute-forcin CVEs: CVE-2017-17215, CVE-2024-1781, CVE-2018-8007, CVE-2025-29635