Malwarecritical
US Gov dismantled the Moobot botnet controlled by Russia
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-35394 | Remote Code Execution via Memory Corruption in Realtek Jungle SDK | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-36260 | Unauthenticated Command Injection in Hikvision Device Web Server | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2022-46169 | Unauthenticated Command Injection in Cacti (CVE-2022-46169) | 9.8 | 100% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.com
The US authorities dismantled the Moobot botnet, which was controlled by the Russia-linked cyberespionage group APT28. A court order allowed US authorities to neutralize the Moobot botnet, a network of hundreds of small office/home office (SOHO) routers under the control of the Russia-linked group APT28 . The botnet was used by the Russian state-sponsored hackers to carry out a broad range of attacks.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.