1951 matches found
CVE-2024-45163
The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC command and control server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username such as root, or can send arbitrary data...
Mirai Botnet 安全漏洞
Mirai Botnet is a leaked Mirai source code by Jerry Gamblin personal developer. It is used for research purposes in order to develop IoT and more. A security vulnerability exists in Mirai Botnet version 2024-08-19 and prior versions, which stems from a mishandled simultaneous TCP connection to a...
CVE-2024-45163
The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC command and control server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username such as root, or can send arbitrary data...
PT-2024-31446
Name of the Vulnerable Software and Affected Versions Mirai botnet versions prior to 2024-08-19 Description The Mirai botnet through 2024-08-19 exhibits improper handling of simultaneous TCP connections to the command and control CNC server. This allows unauthenticated sessions to remain open,...
Build Your Own Botnet 2.0.0 Remote Code Execution Exploit
Build Your Own Botnet BYOB version 2.0.0 exploit that works by spoofing an agent callback to overwrite the sqlite database and bypass authentication and exploiting an authenticated command injection in the payload builder page. Exploit Title: BYOB Build Your Own Botnet v2.0.0 Unauthenticated RCE...
New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining
Cybersecurity researchers have discovered a new variant of the Gafgyt botnet that's targeting machines with weak SSH passwords to ultimately mine cryptocurrency on compromised instances using their GPU computational power. This indicates that the "IoT botnet is targeting more robust servers runni...
Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal
Enterprise Resource Planning ERP Software is at the heart of many enterprising supporting human resources, accounting, shipping, and manufacturing. These systems can become very complex and difficult to maintain. They are often highly customized, which can make patching difficult. However, critic...
CVE-2024-7029
Commands can be injected over the network and executed without authentication. Recent assessments: ccondon-r7 at September 17, 2024 11:39pm UTC reported: TL;DR: Unpatched command injection vulnerability in an end-of-life IP camera, being exploited to drop a Mirai botnet malware variant. Public Po...
PT-2024-5360
The vulnerable software is AVTECH IP cameras, specifically the AVM1203 model. This flaw allows malicious actors to execute command injections remotely, granting them elevated privileges on the target system. The vulnerability is exploited through the brightness function of the camera, enabling...
PT-2024-5979 · Mitel · Mitel 6900 Series +2
Name of the Vulnerable Software and Affected Versions: Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, versions through R6.4.0.HF1 R6.4.0.136 Description: A vulnerability in the Mitel SIP phones could allow an authenticated attacker with...
Unveiling the 2024 Imperva DDoS Threat Landscape Report
In the ever-changing landscape of cybersecurity, Distributed Denial of Service DDoS attacks continue to be a significant threat. To help organizations stay ahead, were excited to introduce the 2024 Imperva DDoS Threat Landscape Report. This comprehensive report offers a deep dive into DDoS attack...
New Golang Botnet “Zergeca” Discovered, Delivers Brutal DDoS Attacks
New Golang botnet "Zergeca" evades detection and launches DDoS attacks. Ensure your IoT devices are fully patched against…...
New Mirai Botnet Variants Observed: How to Identify a Mirai-Style DDoS Attack
The Mirai Internet of Things IoT botnet, notorious for targeting connected household devices like cameras, alarm systems, and personal routers, continues evolving and poses significant cybersecurity threats. It has a history of executing massive DDoS attacks, including a major incident that...
OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers
French cloud computing firm OVHcloud said it mitigated a record-breaking distributed denial-of-service DDoS attack in April 2024 that reached a packet rate of 840 million packets per second Mpps. This is just above the previous record of 809 million Mpps reported by Akamai as targeting a large...
New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks
Cybersecurity researchers have uncovered a new botnet called Zergeca that's capable of conducting distributed denial-of-service DDoS attacks. Written in Golang, the botnet is so named for its reference to a string named "ootheca" present in the command-and-control C2 servers "ootheca.pw" and...
Mirai-like Botnet Targets Zyxel NAS Devices in Europe for DDoS Attacks
Beware, Zyxel customers, and keep your devices up to date...
8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining
Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server. "The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware...
Rust-Based P2PInfect Botnet Evolves with Miner and Ransomware Payloads
The peer-to-peer malware botnet known as P2PInfect has been found targeting misconfigured Redis servers with ransomware and cryptocurrency miners. The development marks the threat's transition from what appeared to be a dormant botnet with unclear motives to a financially motivated operation. "Wi...
P2Pinfect Botnet Now Targets Servers with Ransomware, Cryptominer
The P2Pinfect botnet, once dormant, is now attacking servers with ransomware and cryptomining malware. Patch your systems to avoid data encryption and financial loss...
NiceRAT Malware Targets South Korean Users via Cracked Software
Threat actors have been observed deploying a malware called NiceRAT to co-opt infected devices into a botnet. The attacks, which target South Korean users, are designed to propagate the malware under the guise of cracked software, such as Microsoft Windows, or tools that purport to offer license...