Zerobot botnet malware continues to be an evolving threat

guest · Dec 29, 2022

Zerobot malware now spreads by exploiting Apache vulnerabilities
By Sergiu Gatlan @serghei - December 21, 2022

The Zerobot botnet has been upgraded to infect new devices by exploiting security vulnerabilities affecting Internet-exposed and unpatched Apache servers.

The Microsoft Defender for IoT research team also observed that this latest version adds new distributed denial-of-service (DDoS) capabilities.
Click to expand...

Zerobot has been under active development since at least November, with new versions adding new modules and features to expand the botnet's attack vectors and make it easier to infect new devices, including firewalls, routers, and cameras.

The update spotted by Microsoft adds newer exploits to the malware's toolkit, enabling it to target seven new types of devices and software, including unpatched Apache and Apache Spark servers.
Click to expand...

Microsoft: Microsoft research uncovers new Zerobot capabilities

December 21, 2022
Botnet malware operations are a constantly evolving threat to devices and networks. Threat actors target Internet of Things (IoT) devices for recruitment into malicious operations as IoT devices’ configurations often leave them exposed, and the number of internet-connected devices continue to grow. Recent trends have shown that operators are redeploying malware for a variety of distributions and objectives, modifying existing botnets to scale operations and add as many devices as possible to their infrastructure.
Click to expand...

Zerobot, a Go-based botnet that spreads primarily through IoT and web application vulnerabilities, is an example of an evolving threat, with operators continuously adding new exploits and capabilities to the malware. The Microsoft Defender for IoT research team has been monitoring Zerobot (also called ZeroStresser by its operators) for months.

Zerobot is offered as part of a malware as a service scheme and has been updated several times since Microsoft started to track it. One domain with links to Zerobot was among several domains associated with DDoS-for-hire services seized by the FBI in December 2022.
Click to expand...

Log in or Sign up

Zerobot botnet malware continues to be an evolving threat

guest Guest

Log in or Sign up

Zerobot botnet malware continues to be an evolving threat

guest Guest

Useful Searches