Malwarecritical

Hoaxcalls Botnet expands the target list and adds new DDoS capabilities

Security Affairsby @securityaffairsApr 24, 2020 · 15:36 UTC (Apr 24, 2020)2 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-5722 CVE-2020-8515

Tags: cve-2020-5722 cve-2020-8515 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-5722	Unauthenticated SQL Injection to Root RCE in Grandstream UCM6200 Series IP PBX	9.8	84%	KEVPoC ×3	Mar 23, 2020 KEV Jan 28, 2022
CVE-2020-8515	Unauthenticated Command Injection RCE in DrayTek Vigor3900/2960/300B Routers	9.8	100%	KEVPoC	Feb 1, 2020 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

The Hoaxcalls IoT botnet expanded the list of targeted devices and has added new distributed denial of service (DDoS) capabilities. DDoS protection services provider Radware warns the Hoaxcalls Internet of Things (IoT) botnet has expanded the list of targeted devices, the experts also noticed that the operators implemented new distributed denial of service (DDoS) capabilities.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.