Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

An active malware campaign is leveraging two zero-day vulnerabilities with remote code execution (RCE) functionality to rope routers and video recorders into a Mirai-based distributed denial-of-service (DDoS) botnet.
“The payload targets routers and network video recorder (NVR) devices with default admin credentials and installs Mirai variants when successful,” Akamai said in an advisory

admin attacks botnet bugs campaign code code execution credentials ddos ddos attacks default devices distributed exploiting malware malware campaign mirai network network video nvr payload rce remote code remote code execution routers service video video recorder vulnerabilities zero-day zero-day vulnerabilities