Malwarecritical
Anarchy botmaster builds a botnet of 18,000 Huawei routers in a few hours
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-8361 | Improper Input Validation in Realtek SDK miniigd SOAP Service Enables Remote RCE | — | 100% | KEV | — KEV |
| CVE-2017-17215 | Huawei HG532 with some customized versions has a remote code execution vulnerability | 8.8 | 78% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 104.244.72.82 | nubhav (@ankit_anubhav) July 18, 2018 Ketashi botnet hxxp://104.244.72.82 hxxp://104.244.72.82/sister hxxp://104.244.72.82/k http://1 |
| md5 | c3cf80d13a04996b68d7d20eaf1baea8 | ing public for obvious reasons. The bin in his botnet md5 > c3cf80d13a04996b68d7d20eaf1baea8 As one can see, it uses only 1 exploit, 2017-17215. 2/n pic |
| url | http://104.244.72.82 | Ankit Anubhav (@ankit_anubhav) July 18, 2018 Ketashi botnet hxxp://104.244.72.82 hxxp://104.244.72.82/sister hxxp://104.244.72.82/k http://1 |
| url | http://104.244.72.82/k | shi botnet hxxp://104.244.72.82 hxxp://104.244.72.82/sister hxxp://104.244.72.82/k http://104.244.72.82/gpon #ketashi @360Netlab @ankit_anubha |
| url | http://104.244.72.82/sister | _anubhav) July 18, 2018 Ketashi botnet hxxp://104.244.72.82 hxxp://104.244.72.82/sister hxxp://104.244.72.82/k http://104.244.72.82/gpon #ketashi @ |
From the original article
3 min read at securityaffairs.com
The popular Anarchy botmaster builds a botnet of 18,000 Huawei routers in a few hours, and it is also planning to target vulnerable Realtek routers. NewSky Security first reported the born a new huge botnet, in just one day the botmaster compromised more than 18,000 Huawei routers. NewSky security researcher Ankit Anubhav announced that the botnet had already infected 18,000 routers.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.