Who Makes the IoT Things Under Attack?
Summary: The source code for the Mirai IoT botnet, which powered the record DDoS attack on KrebsOnSecurity, was publicly released, and it spreads by scanning the Internet for IoT devices protected by factory default usernames and passwords. The code contains 68 username and password pairs, most matching network cameras with some routers, DVRs and printers, and the malware is loaded into memory so it is wiped when a device loses power but can be re-infected within minutes of a reboot.
What you should know: Changing the password on a device's Web interface may not close the telnet and SSH logins Mirai actually uses, and Dahua told IPVM it was preparing a trade-in program because many of its default-insecure devices may not be firmware updatable at all.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026