Malwaremedium
Russian security firm sinkholes part of the dangerous Meris DDoS botnet
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-14847 | Directory Traversal in MikroTik RouterOS Winbox Interface (Unauthenticated File Read) | 9.1 | 96% | KEVPoC ×7 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | cosmosentry.com | asking for new instructions from an unregistered domain at cosmosentry[.]com . Seizing the operator's mistake, Rostelecom-Solar engine |
From the original article
3 min read at therecord.media
Rostelecom-Solar, the cybersecurity division of Russian telecom giant Rostelecom, said on Monday that it sinkholed a part of the Meris DDoS botnet after identifying a mistake from the malware's creators. First spotted earlier this year, the Meris botnet is currently the largest DDoS botnet on the internet , with an estimated size of around 250,000 infected systems.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.