KATARU

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 11, 2026
Last mentionedSep 11, 2026

Timeline

2 articles · newest first

New KATARU IoT Malware Packs Linux Privilege Escalation Exploits and Mirai-Style DDoS Attacks

Nozomi Networks identified KATARU, a new Mirai-style IoT botnet delivered via Telnet brute force that uses Linux privilege-escalation exploits and encrypted C2 for DDoS floods.

Cyber Security NewsSep 11, 14:17 UTC · Sep 11, 2026MalwareExploitedCVE-2026-46300 CVE-2026-43284 CVE-2026-314313 · 1 read

New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks

Nozomi details KATARU, an IoT botnet that brute-forces Telnet, exploits public Linux kernel flaws for root access, and launches multi-protocol DDoS attacks.

GBHackersSep 11, 09:07 UTC · Sep 11, 2026MalwareExploitedCVE-2026-46300 CVE-2026-43284 CVE-2026-314314 · 3 reads

Related CVEs

by mentions

CVE-2026-4630016%7.8
Shared-frag marker loss in Linux kernel skb coalescing (LPE)
published May 23, 2026linux kernelKEVPoC
CVE-2026-3143198%7.8
Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface
published Apr 22, 2026Linux kernel (algif_aead / AF_ALG crypto interface)KEVPoC ×12
CVE-2026-4328494%8.8
Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123)
published May 8, 2026Linux kernelPoC

Appears with

Nozomiorganization · 1
BusyBoxproduct · 1
Nozomi Networksorganization · 1
Miraimalware · 1
Nozomi Networksvendor · 1
OpenWrtproduct · 1
OpenWrtvendor · 1
Nozomivendor · 1
KATARUproduct · 1
Linuxvendor · 1
WireGuardvendor · 1
Miraiproduct · 1

Entities are extracted by the model from each article. First seen Sep 11, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.