47 matches found
public-research
Nokia Deepfield ERT — 公开研究 来自诺基亚Deepfield应急响应团队（ERT）的威胁研究，专注于DDoS僵尸网络及相关基础设施。每个目录涵盖一个僵尸网络家族，附有简要总结和机器可读的入侵指标（IoCs）。 本仓库整合了先前的社区研究与Deepfield ERT的原创分析。具体参考信息和归属请参见各README文件。 注意： 指标以原始（非去毒化）形式提供，以便检测工具直接使用。处理URL和域名时请谨慎。 部分指标包含威胁行为者出于品牌或反分析目的而选择的攻击性或粗俗语言。这些内容按原样复现，以利于检测和归因。 目录 目录| 描述 ---|--- aisuru|...
CVE-2020-0022
CVE-2020-0022 针对 Bouygues BBox Miami 的漏洞利用 Android TV 8.0 - ARM32 Cortex A9 作者: Polo35 - 2020/08/24 "用法: python poloexploit.py 目标蓝牙MAC地址 目标ADBIP, 外壳命令, 禁用重启, 详细输出" 基于 Jan Ruge 的脚本 CVE-2020-0022 一个 Android 8.0-9.0 蓝牙零点击 RCE – BlueFrag...
CVE-2026-20516
CVE-2026-20516: MiracastService confused deputy en Android TV Investigación y divulgación por Davide Di Matteo @Dingo97. Este es mi primer CVE acreditado. Encontré un servicio Miracast con privilegios de sistema, exportado incorrectamente, mientras investigaba un PEAQ Android TV. Un llamador pued...
Exploit for CVE-2026-20516
CVE-2026-20516: MiracastService confused deputy on Android TV...
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service DDoS attacks. The new version, tracked as Kimwolf v7, wa...
Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology...
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertising fraud, account takeovers, and mass data-scraping efforts. This week, researchers from multiple security firms concluded that the Popa botn...
Who Operates the Badbox 2.0 Botnet?
The cybercriminals in control of Kimwolf -- a disruptive botnet that has infected more than 2 million devices -- recently shared a screenshot indicating they'd compromised the control panel for Badbox 2.0 , a vast China-based botnet powered by malicious software that comes pre-installed on many...
Kimwolf Botnet Lurking in Corporate, Govt. Networks
A new Internet-of-Things IoT botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service DDoS attacks and to relay other malicious and abusive Internet traffic. Kimwolf's ability to scan the local networks of...
CVE-2021-0889
In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...
Who Benefited from the Aisuru and Kimwolf Botnets?
Our first story of 2026 revealed how a destructive new botnet called Kimwolf has infected more than two million devices by mass-compromising a vast number of unofficial Android TV streaming boxes. Today, we'll dig through digital clues left behind by the hackers, network operators and services th...
The Kimwolf Botnet is Stalking Your Local Network
The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it's time for a broader awareness of the threat. The short version is that everything you thought you knew about...
Is Your Android TV Streaming Box Part of a Botnet?
On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix , ESPN and Hulu , all for a one-time fee of around $400. But security experts...
EUVD-2021-3508
Malicious code in bioql PyPI...
CVE-2025-55971: Server-Side Request Forgery (SSRF)
TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...
Google Android TV has an unspecified vulnerability
Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...
Google Android TV 安全漏洞
Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...
Beware: New Vo1d Malware Infects 1.3 Million Android-based TV Boxes Worldwide
Nearly 1.3 million Android-based TV boxes running outdated versions of the operating system and belonging to users spanning 197 countries have been infected by a new malware dubbed Vo1d aka Void. "It is a backdoor that puts its components in the system storage area and, when commanded by attacker...
