Zerobot Botnet Emerges as a Growing Threat with New Exploits and Capabilities
Significant improvements to the Zero bot DDoS botnet have increased its capacity to attack more internet-connected devices and scale its network.
The continuous threat is being monitored by Microsoft Threat Intelligence Center (MSTIC) with the classification DEV-1061, which stands for unknown, emerging, or developing activity clusters.
Zero bot, a Go-based malware that Fortinet FortiGuard Labs first discovered earlier this month, spreads via security holes in IoT devices like firewalls, routers, and cameras as well as online apps.
According to Microsoft researchers, the most recent version of the Zero bot "includes additional DDoS attack capabilities as well as the ability to exploit vulnerabilities in Apache and Apache Spark (CVE-2021-42013 and CVE-2022-33891, respectively)".
...