Mirai Variant MooBot Targeting D-Link Devices

Unit 42 researchers have identified vulnerabilities in older D-Link routers and other devices that could be used to spread malware and attack on the network, including the Mirai variant, which can launch distributed denial-of-service attacks.

REFERENCE: https://unit42.paloaltonetworks.com/moobot-d-link-devices/

TAGS: MooBot, Mirai, Shell Script, WGET, RCE, DDoS

MALWARE FAMILIES: Mirai, MooBot

ATT&CK IDS: T1495 - Firmware Corruption, T1027 - Obfuscated Files or Information, TA0011 - Command and Control, T1498 - Network Denial of Service, T1595.002 - Vulnerability Scanning

Read More:

https://otx.alienvault.com/pulse/631899219e89bed76f331ecd