Security News > 2022 > December > Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities

The Zerobot DDoS botnet has received substantial updates that expand on its ability to target more internet-connected devices and scale its network.

"The most recent distribution of Zerobot includes additional capabilities, such as exploiting vulnerabilities in Apache and Apache Spark, and new DDoS attack capabilities," Microsoft researchers said.

CVE-2020-25223 - A remote code execution vulnerability in the WebAdmin of Sophos SG UTM. CVE-2021-42013 - A remote code execution vulnerability in Apache HTTP Server.

CVE-2022-31137 - A remote code execution vulnerability in Roxy-WI. CVE-2022-33891 - An unauthenticated command injection vulnerability in Apache Spark.

Zerobot is said to proliferate by scanning and compromising devices with known vulnerabilities that are not included in the malware executable, such as CVE-2022-30023, a command injection vulnerability in Tenda GPON AC1200 routers.

Zerobot 1.1 further incorporates seven new DDoS attack methods by making use of protocols such as UDP, ICMP, and TCP, indicating "Continuous evolution and rapid addition of new capabilities."

News URL

https://thehackernews.com/2022/12/zerobot-botnet-emerges-as-growing.html