Muhstik

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 19, 2026
Last mentionedAug 19, 2026

Timeline

1 articles · newest first

Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices

Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.

Palo Alto Unit 42Aug 19, 12:06 UTC · Aug 19, 2026MalwareExploitedCVE-2019-27252

Related CVEs

by mentions

CVE-2019-2725100%9.8
Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE
published Apr 26, 2019Oracle WebLogic Server (Oracle Fusion Middleware, Web Services subcomponent)KEVRansomwarePoC

Appears with

WordPressproduct · 1
Muhstik botnetmalware · 1
WebLogicproduct · 1
Drupalvendor · 1
GPON routersproduct · 1
Oraclevendor · 1
Palo Alto Networksvendor · 1
DD-WRTproduct · 1
Unit 42organization · 1
Tomato firmwareproduct · 1
Webuzovendor · 1

Entities are extracted by the model from each article. First seen Aug 19, 2026, last mentioned Aug 19, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.