Malwarecritical
Gayfemboy Botnet targets Four
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-35394 | Remote Code Execution via Memory Corruption in Realtek Jungle SDK | 9.8 | 100% | KEVPoC | KEV |
| CVE-2024-12856 | OS Command Injection in Four-Faith F3x24/F3x36 Routers | 7.2 | 84% | PoC ×2 | |
| CVE-2024-8957 | OS Command Injection in PTZOptics PT30X-SDI/NDI Cameras Enables Chained RCE | 7.2 | 80% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.com
Gayfemboy, a Mirai botnet variant, has been exploiting a flaw in Four-Faith industrial routers to launch DDoS attacks since November 2024. The Gayfemboy botnet was first identified in February 2024, it borrows the code from the basic Mirai variant and now integrates N-day and 0-day exploits.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.