SOC Threat Radar June 2026: LemonDuck, GoldBrute and VPN Attacks
Barracuda Networks, Thursday, June 25th, 2026
Barracuda's June threat report flags LemonDuck mining, GoldBrute RDP attacks, and a surge in VPN password spraying.
Barracuda's SOC Threat Radar for June 2026 highlights three major security concerns. LemonDuck malware is infecting endpoints for cryptocurrency mining while persisting via PowerShell scripts and scheduled tasks.
The GoldBrute botnet targets exposed Remote Desktop Protocol services with brute-force attacks that can serve as an entry point for ransomware.
Researchers also documented a 55% surge in password-spraying attacks originating from Iran and targeting Fortigate VPN infrastructure, underscoring continued focus on remote-access vulnerabilities.