Log in Request a demo

Security News

Mirai Variant MooBot Botnet Targets Vulnerable D-Link Devices

MooBot, a Mirai botnet variant, targets D-Link devices through known flaws such as CVE-2015-2051 and CVE-2022-26258 to use them in DDoS attacks.

Brandefense logo Updated 1 Min Read
moobot botnet

Vulnerable D-Link devices are targeted in MooBot botnet campaigns. MooBot is a variant of the Mirai botnet.

Mirai variants such as MooBot spread by exploiting known vulnerabilities in internet-exposed devices running Linux. The following D-Link vulnerabilities are all listed by CISA as exploited in the wild:

Threat actors exploit these vulnerabilities to breach the security of devices and then use these devices as bots in various attacks, such as distributed denial of service (DDoS) targeting different systems.

D-Link has released security updates regarding the specified security vulnerabilities, but some users may still be running un-updated older versions or vulnerable devices, and CISA advises disconnecting end-of-life affected products that can no longer be patched. Therefore, in order not to be the target of similar malware attacks that may be carried out, users using vulnerable D-Link versions are recommended to apply updates that fix the vulnerabilities immediately. In addition, it is important to prevent the IOC findings related to the campaign in question from the security solutions in use.

Share

In This Article

TermsBotnet TermsRemote code execution (RCE) TermsThreat actor TermsDDoS attack

Where To Next.

All Security News Articles
In plain words · Glossary term Botnet

A botnet is a group of hijacked internet-connected devices that an attacker controls remotely and uses to carry out large scale attacks.

Open → Keep reading · Article Critical Zero-Day Alarm on Trend Micro Apex One

Trend Micro has released security updates regarding a zero-day vulnerability identified in Apex One and Apex One SaaS endpoint security solutions

Open → Keep reading · Article RedLine Stealer Malware Was Distributed Through the Corporate Social Media Accounts

RedLine Stealer was spread through a sponsored Facebook post and hacked business accounts offering fake free Adobe Reader.

Open →

Knowledge HubMalware and tools