Mirai is coming: IZ1H9 group successfully deployed 13 exploits in the last month

Carding 4 Carders

Professional
Messages
2,730
Reaction score
1,467
Points
113
Even the most popular models of routers and IoT devices will not resist the onslaught of hackers.

The FortiGuard Labs division of Fortinet revealed the activity of the IZ1H9 hacker group, aimed at Internet of Things devices to infect them with the Mirai botnet.

In September, hackers significantly expanded the list of exploited vulnerabilities for hacking popular models of routers, IP cameras and other network devices, including brands TP-Link, D-Link, TOTOLINK, Zyxel, Netis, etc.In total, experts counted 13 new exploits.

The attacks peaked on September 6. In one day, hackers made thousands of attempts to hack devices around the world. The goal of IZ1H9 is to create an extensive botnet-a network of infected devices under the control of intruders, which can be used in organizing DDoS attacks or hidden cryptomining.

After hacking, a malicious script is downloaded to the device, installing malicious software and deleting logs to hide the traces of intruders. Most often, so-called zero-day vulnerabilities are used to spread malware, for which fixes have not yet been released.

Hackers are usually very quick to introduce new exploits into their arsenal of tools, which allows them to massively infect unprotected devices.

Compromising vulnerable hardware can lead to serious security risks. Despite the rapid release of fixes for such vulnerabilities, users of such devices rarely update their software in a timely manner, which is why the number of successful exploits remains alarmingly high, often in the thousands.

To avoid becoming a victim of such an attack, users are advised to regularly check for software updates on their network devices and install them in a timely manner. And if the manufacturer has stopped supporting the hardware, you should change it to a more modern one that receives security updates.

It is also very important to make sure to change the default passwords when setting up your network devices for the first time to something more reliable. This approach will definitely protect you from most hacker attacks.
 
Top