IoT Malware Evolves to Harvest Bots by Exploiting a Zero-day Home Router Vulnerability
Summary: 360 Netlab discovered a new Mirai-derived malware family named Satori in early December 2017, and Palo Alto Networks Unit 42 identified three variants, the first appearing in April 2017. The third variant exploited CVE-2017-17215, a Huawei HG532e home gateway vulnerability patched in early December 2017, and was active in late November 2017 before the patch existed, making it a classic zero-day attack.
Why it matters: Satori's author appears to be reverse engineering IoT firmware to find new vulnerabilities, which means the next variant may target devices you own before any patch exists.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2014-8361CVE-2017-17215
- Related
- Mirai Compiled for New Processors Surfaces in the Wild Cyber Risks ·