Mirai Compiled for New Processors Surfaces in the Wild
Summary: In late February 2019, Unit 42 discovered Mirai samples compiled for four processors not previously targeted: Altera Nios II, OpenRISC, Tensilica Xtensa, and Xilinx MicroBlaze. The samples were hosted on a single IP, 178.62.227[.]13, which also hosted Mirai samples using known exploits including CVE-2014-8361 and CVE-2017-17215, and the server hid its file listing on February 22, 2019 while continuing to host the files.
Why it matters: Mirai's source has been public since October 2016, so recompiling it for more embedded processors costs attackers little and widens the pool of IoT devices feeding denial-of-service firepower - the same malware family that hit Dyn and Brian Krebs' site in 2016.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2014-8361CVE-2017-17215
- Related