60
60
60
Muhstik Botnet Attacks Tomato Routers to Harvest New IoT Devices
Unit 42 found a Muhstik botnet variant brute-forcing Tomato router web authentication to harvest IoT devices for crypto mining and DDoS attacks.
Palo Alto Networks Unit 42 researchers in December 2019 identified a new Muhstik botnet variant scanning Tomato routers on TCP 8080 and brute-forcing default admin credentials, targeting roughly 4,600 exposed devices found via Shodan. The variant also scans WordPress and Webuzo installations and exploits the Oracle WebLogic deserialization flaw CVE-2019-2725 for unauthenticated remote code execution. Muhstik, active since March 2018, self-propagates like a worm and typically monetizes infections through cryptocurrency mining and DDoS attacks controlled via an IRC C2 channel.
32
60
35
47
30
60
60
57
47
57
30
42
30
60
30
60
47
47
Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems
60
60
60
60
60
60
60
60
60
47
30
CISA adds 15 new flaws to its Known Exploited Vulnerabilities Catalog
60
60
60
47
35
30
60
60