Malwarecritical
Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-17105 | Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command… | 9.8 | 85% | PoC ×2 | |
| CVE-2019-10655 | Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow… | 9.8 | 15% | PoC ×3 | |
| CVE-2020-25223 | Unauthenticated Command Injection RCE in Sophos SG UTM WebAdmin | 9.8 | 97% | KEVPoC ×2 | KEV |
| CVE-2021-42013 | Path Traversal and RCE in Apache HTTP Server (follow-up to CVE-2021-41773) | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
| CVE-2022-30023 | Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function | 8.8 | 39% | PoC | |
| CVE-2022-31137 | Roxy-WI: Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the… | 9.8 | 91% | PoC | |
| CVE-2022-33891 | Command Injection in Apache Spark UI via ACL Impersonation (CVE-2022-33891) | 8.8 | 93% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | zerostresser.com | icrosoft said that one domain with connections to Zerobot – zerostresser[.]com – was among the 48 domains that were seized by the U.S. F |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Dec 22, 2022 Internet of Things / Patch Management The Zerobot DDoS botnet has received substantial updates that expand on its ability to target more internet-connected devices and scale its network. Microsoft Threat Intelligence Center (MSTIC) is tracking the ongoing threat under the moniker DEV-1061, its designation for unknown, emerging, or developing activity clusters.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.