Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

Matrix

Matrix is a threat actor group, tracked by Brandefense. It exploits 2 known CVEs.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
2
First seen
Nov 29, 2024
Last seen
Nov 29, 2024
Record updated

About Matrix.

Matrix is a financially motivated DDoS-for-hire operator documented by Aqua Nautilus in November 2024. Researchers described a campaign using public scripts, Mirai-family malware, brute-force of default credentials (167 username/password pairs, 134 granting admin/root), and known flaws including CVE-, CVE-, Apache HugeGraph, Hadoop YARN, Telnet, and SSH against IoT cameras, DVRs, routers, and enterprise servers, with heaviest scanning in China and Japan. Aqua estimated about 35 million internet-facing devices running targeted products, implying a potential botnet of hundreds of thousands of hosts if even a small fraction are exploitable. Matrix advertised Layer-4 and Layer-7 DDoS plans on Telegram (including a Kraken Autobuy store) and is assessed as likely Russian and financially motivated.

Last updated Sep 12, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.