New Mirai Variant Adds 8 New Exploits, Targets Additional IoT Devices
Summary: Palo Alto Networks Unit 42 discovered a new Mirai variant carrying 18 exploits in total, 8 of them new to the malware family, aimed at devices including wireless presentation systems, set-top-boxes, SD-WANs and smart home controllers. The samples were hosted in an open directory and updated until a final version was uploaded on 26-May-2019, using two C2 domains and, at one point, port 17 on the hosting IP address.
What's compelling: Mirai's authors keep the exploits that infect the most devices and retire the rest, so this 18-exploit sample reflects a tested playbook for assembling larger botnets - and it reaches business-grade gear like VMware NSX SD-WAN Edge and Oracle WebLogic, not just consumer gadgets.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026