Mirai Variant ECHOBOT Resurfaces with 13 Previously Unexploited Vulnerabilities
Summary: The Mirai variant ECHOBOT resurfaced on October 28, 2019, then again on December 3, 2019 with switched payload IPs, carrying 71 unique exploits, 13 of which had not previously been seen exploited in the wild. Those 13 span CVEs from as far back as 2003 to vulnerabilities made public in early December 2019, and target devices including routers, firewalls, IP cameras, a PLC, an online payment system and a yacht control web application.
Why it matters: The variant's exploit list reaches from a 2003 CVE to one published days before the December sample, betting on devices too old to update and flaws too new to have been patched - and it added two more exploits between its October and December appearances.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026