DDoS Malware Targets AVTech CGI Vulnerability

Minimalist · Mar 12, 2017

A newly discovered Linux malware family is targeting products from surveillance technology company AVTech via a CGI vulnerability that was disclosed in October 2016, Trend Micro researchers warn.

Detected as ELF_IMEIJ.A, the malware is the latest in a long list of Trojans targeting Linux ARM devices (such as Mirai, Umbreon rootkit, LuaBot, BashLite, and more). Linux has become the platform of choice for many Internet of Things (IoT) devices, and it’s no wonder cybercriminals are focusing on targeting it, as this provides them with a large attack surface.
Click to expand...

http://www.securityweek.com/ddos-malware-targets-avtech-cgi-vulnerability

guest · Jul 24, 2018

Malware Author Building "Death" Botnet Using Old AVTech Flaw
July 24, 2018
https://www.bleepingcomputer.com/ne...-building-death-botnet-using-old-avtech-flaw/

A malware author by the name of EliteLands is currently building a botnet named "Death" by targeting unpatched AVTech devices.

The hacker is using an exploit for these devices that was published back in late 2016. The exploit targets 14 well-known vulnerabilities in the firmware shared by several AVTech device types, such as DVRs, NVRs, IP cameras, and more.
HNS botnet is also targeting AVTech devices
For its credit, AVTech has patched the issues exploited by Death at the start of 2017. Patched firmware versions have been available for more than a year.

The exploit and vulnerabilities used by the EliteLands to build the Death botnet are the same ones that the Hide 'N Seek (HNS) botnet started using last month when it began expanding from taking over home routers to hijacking IoT devices.
Click to expand...

Log in or Sign up

DDoS Malware Targets AVTech CGI Vulnerability

Minimalist Registered Member

guest Guest

Log in or Sign up

DDoS Malware Targets AVTech CGI Vulnerability

Minimalist Registered Member

guest Guest

Useful Searches