Mirai botnet returns to target IoT devices

Image Credit: Pixabay

A new variant of the Mirai malware targeting IoT devices has been discovered in the wild by security researchers from Palo Alto Networks.

The researchers first discovered this new strain earlier this year and now it is being used in a new IoT botnet targeting smart signage TVs and wireless presentation systems.

The authors of the botnet have spent a great deal of time upgrading older versions of the Mirai malware with new exploits and according to Palo Alto Networks, this new Mirai botnet uses 27 exploits with 11 that are completely new to Mirai altogether.

Mirai's built-in list of default credentials has also been expanded by the botnet operator to allow the malware to more easily gain access to devices that use default passwords. In total, four new username and password combinations have been added according to a new report from Palo Alto Network's Unit 42.

IoT devices

This new Mirai botnet is intended to infect IoT devices with exposed Telnet ports through the use of default credentials which many hardware makers continue to leave unchanged despite the security risks they pose.

While previous botnets using the Mirai malware have targeted routers, modems, security cameras and DVRs, the latest one is intentionally targeting smart signage TVs and wireless presentation systems, specifically LG's Supersign TVs and the WePresent WiPG-1000 wireless presentation system.

Both of these exploits have been available online for some time but this is the first instance researchers have seen of them being weaponized.

To avoid having your devices fall victim to the Mirai botnet, it is recommended that you only use devices from trusted manufacturers and immediately change the default passwords on those devices.

Via ZDNet

Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Latest in Pro
Finger Presses Orange Button Domain Name Registration on Black Keyboard Background. Closeup View
I visited the world’s first registered .com domain – and you won’t believe what it’s offering today
Racks of servers inside a data center.
Modernizing data centers: an efficient path forward
Dr. Peter Zhou, President of Huawei Data Storage Product Line
Why AI commonization is so important for business intelligent transformation and what Huawei’s data storage has to offer
Wix automation
The world's leading website builder aims to save businesses time with new tool
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Latest in News
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 16 (game #1147)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 16 (game #378)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 16 (game #644)
Three iPhone 16 handsets on show
Apple could launch an iPhone 17 Ultra this year – but we've heard these rumors before
Super Mario Odyssey
ChatGPT is the ultimate gaming tool - here's 4 ways you can use AI to help with your next playthrough