New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens

Summary

A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, and workflow builders that teams stand up fast and firewall late. The intel feed behind that counter

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.