DrayTek

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedSep 16, 2026

Timeline

2 articles · newest first

BambooToken: The Malware That Speaks MQTT to Stay Under the Radar

Lumen's Black Lotus Labs uncovered BambooToken, a Windows and Linux malware family using MQTT broker-based C2 and DLL sideloading across Asia since February 2023.

Security AffairsSep 16, 20:20 UTC · Sep 16, 2026MalwareExploited3

Mirai Variant V3G4 Targets IoT Devices

Unit 42 tracked the Mirai variant V3G4 exploiting 13 vulnerabilities across IoT devices and servers from July-December 2022 to build a DDoS botnet.

Palo Alto Unit 42Aug 17, 13:05 UTC · Aug 17, 2026MalwareExploitedCVE-2012-4869 CVE-2014-9727 CVE-2017-5173+63 · 2 reads

Related CVEs

by mentions

CVE-2020-1541584%9.8
Unauthenticated OS Command Injection in DrayTek Vigor3900/2960/300B Routers
published Jun 30, 2020DrayTek Vigor3900KEVPoC
CVE-2022-26134100%9.8
Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center
published Jun 3, 2022Atlassian Confluence ServerKEVRansomwarePoC ×2
CVE-2020-8515100%9.8
Unauthenticated Command Injection RCE in DrayTek Vigor3900/2960/300B Routers
published Feb 1, 2020DrayTek Vigor3900KEVPoC
CVE-2019-15107100%9.8
Unauthenticated Command Injection RCE in Webmin <= 1.920
published Aug 16, 2019WebminKEVRansomwarePoC ×5
CVE-2017-517330%9.8
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12
published May 19, 2017geutebrueck ip camera g-cam efd-2250 firmwarePoC
CVE-2022-3626754%9.8
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability
published Aug 8, 2022airspan airspot 5410 firmwarePoC ×2
CVE-2022-425744%9.8
C-DATA Web Management System: It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET…
published Dec 1, 2022cdatatec c-data web management systemPoC
CVE-2012-486970%—
published —
CVE-2014-972772%—
published —

Appears with

Palo Alto Networksorganization · 1
FreePBXproduct · 1
Kingsoftvendor · 1
Kingsoft Officeproduct · 1
Miraimalware · 1
Atlassianvendor · 1
BambooTokenmalware · 1
Lumenorganization · 1
Tendyronvendor · 1
Unit 42organization · 1
Black Lotus Labsorganization · 1
Webminvendor · 1
Geutebruckvendor · 1
MikroTikvendor · 1
DrayTek Vigorproduct · 1
VirusTotalorganization · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.