Security researchers have identified a new botnet-building campaign named Murdoc, targeting IP cameras and routers. The campaign, resembling the notorious Mirai botnet, exploits vulnerabilities in AVTECH IP cameras and Huawei HG532 routers using CVE-2017-17215 and CVE-2024-7029.
The operation, likely initiated in July 2024, has compromised over 1,000 devices mainly in Malaysia, Mexico, Thailand, Indonesia, and Vietnam. The attackers can use the botnet for DDoS attacks, disrupting services and causing financial losses. Mirai, known for the 2016 Dyn attack, was created by Paras Jha, Josiah White, and Dalton Norman but remains active despite law enforcement efforts.
Recently, a new Mirai variant named ‘gayfemboy’ surfaced, targeting Four-Faith industrial routers with over 20 vulnerabilities, some of which are unknown. This evolving threat landscape underscores the importance of robust cybersecurity measures.