Mirai Variant Dark.IoT Expands Reach Beyond IoT Devices to Linux Servers Hosted in the Cloud in Attempt to Increase DDoS Capability

Radware researchers have found that a Mirai variant in development since February 2021 has continued to evolve, making it more capable and dangerous than ever. 

Back in August 2021, Radware reported that a Mirai variant campaign known as Dark.IoT had begun leveraging a vulnerability, CVE-2021-35395, in Realtek's SDK just days after its disclosure. Researchers named the botnet Dark.IoT, based on the use of "Dark.[architecture]" filenames for its malware binaries and the reoccurring use of "lmaoiot" variations throughout its infrastructure naming. 

from DZone.com Feed https://ift.tt/30fTI8F