Malwarecritical
Mirai Variant MooBot Botnet Exploiting D
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2051 | Remote Command Execution via HNAP GetDeviceSettings in D-Link DIR-645 Router | — | 97% | KEV | — KEV |
| CVE-2018-6530 | Unauthenticated OS Command Injection in D-Link DIR-860L/865L/868L/880L Routers | 9.8 | 97% | KEVRansomwarePoC | KEV |
| CVE-2022-26258 | Unauthenticated Remote Command Execution in D-Link DIR-820L Router | 9.8 | 92% | KEVPoC ×2 | KEV |
| CVE-2022-28958 | Rejected reason: DO NOT USE THIS CVE RECORD | — | — |
From the original article
1 min read at thehackernews.com
A variant of the Mirai botnet known as MooBot is co-opting vulnerable D-Link devices into an army of denial-of-service bots by taking advantage of multiple exploits. "If the devices are compromised, they will be fully controlled by attackers, who could utilize those devices to conduct further attacks such as distributed denial-of-service (DDoS) attacks," Palo Alto Networks Unit 42 said in a Tuesday report.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.