{"id":2536375,"date":"2023-04-13T17:15:00","date_gmt":"2023-04-13T21:15:00","guid":{"rendered":"https:\/\/platoai.gbaglobal.org\/platowire\/uncommon-tactics-used-by-new-mirai-variant-to-spread-malware\/"},"modified":"2023-04-13T17:15:00","modified_gmt":"2023-04-13T21:15:00","slug":"uncommon-tactics-used-by-new-mirai-variant-to-spread-malware","status":"publish","type":"platowire","link":"https:\/\/platoai.gbaglobal.org\/platowire\/uncommon-tactics-used-by-new-mirai-variant-to-spread-malware\/","title":{"rendered":"Uncommon Tactics Used by New Mirai Variant to Spread Malware"},"content":{"rendered":"

The Mirai botnet has been a notorious malware that has been used to launch some of the largest DDoS attacks in history. It was first discovered in 2016 and has since evolved into several variants, each with its own unique tactics to spread malware. Recently, a new variant of Mirai has been discovered that uses uncommon tactics to infect devices and spread malware.<\/p>\n

One of the most notable tactics used by this new Mirai variant is the exploitation of a vulnerability in the Huawei HG532 router. This vulnerability, which was first discovered in 2017, allows attackers to bypass authentication and gain access to the router’s administrative panel. Once the attacker gains access, they can then install the Mirai malware on the router and use it to launch DDoS attacks or spread the malware to other devices on the network.<\/p>\n

Another tactic used by this new Mirai variant is the exploitation of a vulnerability in the Realtek SDK. This vulnerability allows attackers to execute arbitrary code on devices that use the SDK, including IP cameras, routers, and other IoT devices. Once the attacker gains access to the device, they can then install the Mirai malware and use it to launch DDoS attacks or spread the malware to other devices on the network.<\/p>\n

In addition to these vulnerabilities, this new Mirai variant also uses brute-force attacks to gain access to devices that have weak or default passwords. This tactic is not new to Mirai, but it is still effective as many users fail to change their default passwords or use weak passwords that are easily guessed by attackers.<\/p>\n

To protect against this new Mirai variant, users should ensure that their devices are updated with the latest security patches and firmware updates. They should also change any default passwords and use strong passwords that are difficult for attackers to guess. Additionally, users should consider using a network security solution that can detect and block malicious traffic from Mirai and other botnets.<\/p>\n

In conclusion, the new Mirai variant is a reminder that attackers are constantly evolving their tactics to spread malware and launch attacks. By staying vigilant and taking proactive measures to secure their devices, users can protect themselves from these threats and help prevent the spread of malware.<\/p>\n