New Gafgyt Variant Recruits Routers to DDoS Servers for Valve Games

guest · Oct 31, 2019

New Gafgyt Variant Recruits Routers to DDoS Servers for Valve Games
October 31, 2019
https://www.bleepingcomputer.com/ne...uits-routers-to-ddos-servers-for-valve-games/

A new version of Gafgyt botnet malware has been enlisting routers from Zyxel and Huawei, as well as devices with Realtek RTL81xx chipset, using them for denial-of-service (DoS) attacks against servers running the Valve Source engine.
To compromise the targets, this Gafgyt variant exploits three known remote code execution vulnerabilities affecting the targeted devices.
Old exploits can still ensnare thousands of devices
Gafgyt is a popular choice for launching large-scale DDoS attacks and it has been around since 2014.
The payload causes a reflective attack in which requests to the bots are redirected to the target machine, overwhelming it.

Analysis from Unit 42 found that the new Gafgyt looks for code from competing botnets and attempts to deactivate it in order to keep the compromised device for itself. This is achieved by searching for binary names and keywords available in other IoT botnet variants. Among the competitors are JenX, Hakai, Miori, Satori, and Mirai.
Click to expand...

Palo Alto Networks - Unit42: Home & Small Office Wireless Routers Exploited to Attack Gaming Servers

Minimalist · Apr 15, 2021

Gafgyt Botnet Lifts DDoS Tricks from Mirai

The IoT-targeted malware has also added new exploits for initial compromise, for Huawei, Realtek and Dasan GPON devices.
Click to expand...

https://threatpost.com/gafgyt-botnet-ddos-mirai

Log in or Sign up

New Gafgyt Variant Recruits Routers to DDoS Servers for Valve Games

guest Guest

Minimalist Registered Member

Log in or Sign up

New Gafgyt Variant Recruits Routers to DDoS Servers for Valve Games

guest Guest

Minimalist Registered Member

Useful Searches