Dysphoria Botnet Infects 200K Devices via Blockchain DNS and UPnP Relays

A new botnet called Dysphoria has compromised 200,000 IoT and Linux devices using weak credentials and 13 known vulnerabilities. It uses Ethereum Name Service and Solana Name Service to resolve multi-stage C2 servers, and exploits UPnP to turn infected devices into relays. The malware hides as libdalvikengine.so and can launch DDoS attacks on command.