Threat Source newsletter (April 2, 2020)
Summary: Cisco Talos reported that a Mirai botnet variant called Mukashi targeted vulnerable Zyxel network-attached storage devices through CVE-2020-9054, rated critical at 9.8 out of 10, which has since been patched. Talos also reported that the Sodinokibi, Nemty and DoppelPaymer ransomware families are creating sites to publish stolen data if victims do not pay, following the Maze actors who launched a similar site in early March.
Why it matters: Ransomware operators are no longer just encrypting files - they are standing up public sites to leak what they stole, so a single infection now carries both an extortion demand and the exposure of your data.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2020-9054
- Related
- CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022Zyxel Fixes 0day in Network Storage Devices Cyber Risks ·Zyxel Flaw Powers New Mirai IoT Botnet Strain Cyber Risks ·