Zyxel Flaw Powers New Mirai IoT Botnet Strain

Summary: Palo Alto Networks researchers detected a new Mirai variant called Mukashi on March 12, exploiting CVE-2020-9054, a critical flaw in Zyxel VPN firewalls and NAS devices. Zyxel patched the flaw on February 24, but the update did not cover many older Zyxel devices the company no longer supports, and a joint DHS and CERT advisory rates the vulnerability a 10.
What you should know: Zyxel has some 100 million devices deployed worldwide, and infected IoT systems report to a control server that can push commands to scan and exploit other systems or launch DDoS attacks. Attackers known for deploying ransomware have also been testing this bug, so any Zyxel device that cannot be patched remains a standing liability.

Read the original at Krebs on Security ↗

Topics: Endpoint & Network Security
Mentions: CVE-2020-9054
Related: CVE-2020-9054: Zyxel Multiple NAS Devices OS Command Injection Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022
Threat Source newsletter (April 2, 2020) Cyber Risks ·
Zyxel Fixes 0day in Network Storage Devices Cyber Risks ·