Security News > 2021 > March > New botnet targets network security devices with critical exploits

Authors of a new botnet are targeting connected devices affected by critical-level vulnerabilities, some of them impacting network security devices.

Successfully compromised devices end up with a variant of the Mirai botnet malware specific to the architecture of the device.

In mid-February, security researchers at Palo Alto Networks' Unit 42 discovered attacks from this botnet and started to track its activity.

It took about a month for the botnet operator to integrate exploits for ten vulnerabilities, many of them critical, for various targets.

There are more recent exploits leveraged in these attacks, like CVE-2021-22502, a remote code execution bug in the Micro Focus Operation Bridge Reporter product from Vertica.

Unit 42 researchers say that three of the vulnerabilities the attackers exploit have yet to be identified as the targets remain unknown.

News URL

https://www.bleepingcomputer.com/news/security/new-botnet-targets-network-security-devices-with-critical-exploits/