Multiple DDoS Botnets Exploited 0-Day Flaws in LILIN DVR Surveillance Systems

mood · Mar 21, 2020

Multiple DDoS Botnets Exploited 0-Day Flaws in LILIN DVR Surveillance Systems
March 21, 2020
https://thehackernews.com/2020/03/ddos-botnets-lilin-dvr.html

Multiple zero-day vulnerabilities in digital video recorders (DVRs) for surveillance systems manufactured by Taiwan-based LILIN have been exploited by botnet operators to infect and co-opt vulnerable devices into a family of denial-of-service bots.

The findings come from Chinese security firm Qihoo 360's Netlab team, who say different attack groups have been using LILIN DVR zero-day vulnerabilities to spread Chalubo, FBot, and Moobot botnets at least since August 30, 2019.
Netlab researchers said they reached out to LILIN on January 19, 2020, although it wasn't until a month later the vendor released a firmware update (2.0b60_20200207) addressing the vulnerabilities.
What Are the LILIN Zero-Days About?
The flaw in itself concerns a chain of vulnerabilities that make use of hard-coded login credentials (root/icatch99 and report/8Jg0SR8K50), potentially granting an attacker the ability to modify a DVR's configuration file and inject backdoor commands when the FTP or NTP server configurations are synchronized.
Click to expand...

The researchers said they reached out to LILIN twice, first after the FBot attacks, and then a second time after the Moobot infections happened.

Although Netlab didn't go into specifics of the motives behind the infections, it wouldn't be surprising if they were used by threat actors to perform distributed denial-of-service (DDoS) attacks on websites and DNS services.

"LILIN users should check and update their device firmwares in a timely fashion, and strong login credentials for the device should be enforced," Netlab researchers said.
Click to expand...

Qihoo 360 Netlab: Multiple botnets are spreading using LILIN DVR 0-day

Log in or Sign up

Multiple DDoS Botnets Exploited 0-Day Flaws in LILIN DVR Surveillance Systems

mood Updates Team

Log in or Sign up

Multiple DDoS Botnets Exploited 0-Day Flaws in LILIN DVR Surveillance Systems

mood Updates Team

Useful Searches