Moobot

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedAug 19, 2026

Timeline

2 articles · newest first

New Mirai Variant Targeting Network Security Devices

New Mirai botnet variant exploits nine vulnerabilities in SonicWall, D-Link, Netgear, and other devices, with attacks ongoing at publication.

Palo Alto Unit 42Aug 19, 12:04 UTC · Aug 19, 2026Exploit / PoCExploitedCVE-2020-25506 CVE-2020-26919 CVE-2019-19356+31 · 1 read

Mirai Variant MooBot Targeting D

Unit 42 observed the MooBot Mirai variant exploiting four D-Link vulnerabilities to compromise unpatched routers for use in DDoS attacks.

Palo Alto Unit 42Aug 17, 13:06 UTC · Aug 17, 2026MalwareExploitedCVE-2015-2051 CVE-2018-6530 CVE-2022-26258+1

Related CVEs

by mentions

CVE-2020-25506100%9.8
Command Injection in D-Link DNS-320 system_mgr.cgi Allows Remote Code Execution
published Feb 2, 2021D-Link DNS-320 (network-attached storage device)KEVPoC
CVE-2021-2756183%9.8
Unauthenticated Root Command Injection in Yealink Device Management
published Oct 15, 2021Yealink Device ManagementKEV
CVE-2022-2625892%9.8
Unauthenticated Remote Command Execution in D-Link DIR-820L Router
published Mar 28, 2022D-Link DIR-820L router firmwareKEVPoC ×2
CVE-2018-653097%9.8
Unauthenticated OS Command Injection in D-Link DIR-860L/865L/868L/880L Routers
published Mar 6, 2018D-Link DIR-880L firmwareKEVRansomwarePoC
CVE-2020-2691957%9.8
Missing Function-Level Access Control in NETGEAR JGS516PE Smart Managed Switches
published Oct 9, 2020NETGEAR JGS516PE firmware (ProSAFE 16-port Gigabit PoE+ Smart Managed Plus switch)KEV
CVE-2021-2250297%9.8
Unauthenticated Command Injection RCE in Micro Focus Operation Bridge Reporter
published Feb 8, 2021Micro Focus Operation Bridge Reporter (OBR)KEVPoC
CVE-2019-1935628%7.5
Command Injection RCE as Root in Netis WF2419 Routers
published Feb 7, 2020Netis WF2419 router (WF2419 Devices)KEVPoC ×3
CVE-2021-275623%5.5
Out-of-Bounds Write in Arm Trusted Firmware-M Through 1.2
published May 25, 2021trustedfirmware (Arm Trusted Firmware-M project) Trusted Firmware-MKEV
CVE-2015-205197%—
Remote Command Execution via HNAP GetDeviceSettings in D-Link DIR-645 Router
published —D-Link DIR-645 Wired/Wireless RouterKEV
CVE-2022-28958—
Rejected reason: DO NOT USE THIS CVE RECORD
published May 18, 2022

Appears with

Miraimalware · 2
Unit 42organization · 2
D-Linkvendor · 2
DNS-320product · 1
SSL-VPNproduct · 1
D-Link routersproduct · 1
ProSAFE Plusproduct · 1
Operation Bridge Reporterproduct · 1
WF2419product · 1
Netisvendor · 1
Palo Alto Networksorganization · 1
SonicWallvendor · 1
Netgearvendor · 1
Micro Focusvendor · 1
Yealinkvendor · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Aug 19, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.