Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet
According to research from Fortinet FortiGuard Labs and Palo Alto Networks Unit 42, threat actors are using security holes in TBK DVR and end-of-life (EoL) TP-Link Wi-Fi routers to install Mirai-botnet variants on vulnerable devices.
CVE-2024-3721 (CVSS score: 6.3), a medium-severity command injection vulnerability affecting TBK DVR-4104 and DVR-4216 digital video recording devices, has been reported to be exploited by the attack targeting TBK DVR devices in order to distribute a Mirai version known as Nexcorium.
Due to their extensive use, lack of updating, and frequently inadequate security settings, IoT devices are becoming more and more popular targets for large-scale assaults, according to security researcher Vincent Li. "To obtain initial access and install malware that can en...