TP-Link and NR routers targeted by worrying new botnet
Posted by:
Emma Walker
A new variant of the notorious Mirai botnet is targeting multiple vulnerable endpoints for Distributed Denial of Service (DDoS) attacks, researchers have uncovered. The malware is now focusing on exploiting weaknesses in devices such as DigiEver DS-2105 Pro NVRs, outdated TP-Link routers, and Teltonika RUT9XX routers. By taking advantage of old vulnerabilities like CVE-2023-1389 and CVE-2018-17532, the attackers are aiming at organizations with poor cybersecurity practices. This evolving threat uses encryption methods like XOR and ChaCha20, targeting various system architectures. Mirai operators are adapting tactics to include more sophisticated techniques in their malicious campaigns. Recent reports highlight the exploitation of security flaws in devices like the AVM1203 surveillance camera, illustrating an ongoing effort by cybercriminals to expand the Mirai botnet. Stay informed to protect your network against such threats. via BleepingComputer
Recent Posts1
