Security News > 2023 > November > New botnet malware exploits two zero-days to infect NVRs and routers
A new Mirai-based malware botnet named 'InfectedSlurs' has been exploiting two zero-day remote code execution vulnerabilities to infect routers and video recorder devices.
The malware hijacks the devices to make them part of its DDoS swarm, presumably rented for profit.
The botnet leverages an undocumented RCE flaw to gain unauthorized access to the device.
"The SIRT did a quick check for CVEs known to impact this vendor's NVR devices and was surprised to find that we were looking at a new zero-day exploit being actively leveraged in the wild," reads Akamai's report.
Looking closer into the campaign, Akamai discovered that the botnet also targets a wireless LAN router popular among home users and hotels, which suffers from another zero-day RCE flaw leveraged by the malware.
Given the lack of a patch for the affected devices, rebooting your NVR and rooter devices should temporarily disrupt the botnet.
News URL
Related news
- Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet (source)
- MikroTik botnet uses misconfigured SPF DNS records to spread malware (source)
- Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws (source)
- 13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks (source)
- Mirai Variant Murdoc_Botnet Exploits AVTECH IP Cameras and Huawei Routers (source)
- Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025 (source)
- Juniper enterprise routers backdoored via “magic packet” malware (source)
- New Aquabotv3 botnet malware targets Mitel command injection flaw (source)
- New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks (source)
- Hackers exploit SimpleHelp RMM flaws to deploy Sliver malware (source)