2020 DNS Firmware Malware 
SecureList
JULY 25, 2022
Rootkits are malware implants which burrow themselves in the deepest corners of the operating system. In this report, we present a UEFI firmware rootkit that we called CosmicStrand and attribute to an unknown Chinese-speaking threat actor. Introduction. Affected devices. an evil maid attack scenario).
Malwarebytes
JUNE 30, 2022
The so-called ZuoRAT campaign, which very likely started in 2020, is so sophisticated that the researchers suspect that there is a state sponsored threat actor behind it. The threat actor can then use DNS hijacking and HTTP hijacking to cause the connected devices to install other malware. DNS hijacking. SOHO routers.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
SecureList
DECEMBER 18, 2020
On December 13, 2020 FireEye published important details of a newly discovered supply chain attack. For instance, before making the first internet connection to its C2s, the Sunburst malware lies dormant for a long period, of up to two weeks, which prevents an easy detection of this behavior in sandboxes. avsvmcloud[.]com”
Security Affairs
OCTOBER 5, 2020
Unlike other IoT DDoS botnets, Ttint implements 12 remote access functions such as Socket5 proxy for router devices, tampering with router firewall and DNS settings, executing remote custom system commands. ” When the botnet was first detected in 2019, experts noticed it was exploiting the Tenda zero-day flaw tracked as CVE-2020-10987.
Security Affairs
DECEMBER 21, 2020
Critical vulnerabilities tracked as CVE-2020-29492 and CVE-2020-29491 affect several Dell Wyse thin client models that could be exploited by a remote attacker to execute malicious code and gain access to arbitrary files. Both CVE-2020-29492 and CVE-2020-29491 reside in the ThinOS operating system that runs on Dell Wyse thin clients.
Security Affairs
NOVEMBER 1, 2021
On 2020-01-02, CNCERT reported that “the number of Bot node IP addresses associated with this botnet exceeds 5 million. Every time a vendor made some attempts to address the problem, the botmaster pushed out multiple firmware updates on the fiber routers to maintain their control.
SecureList
SEPTEMBER 21, 2023
The first-ever large-scale malware attacks on IoT devices were recorded back in 2008, and their number has only been growing ever since. A successful password cracking enables hackers to execute arbitrary commands on a device and inject malware. Botnet based on Medusa, working since 2020. Our advantages: 1. Tested, tried.
Expert insights. Personalized for you.
145 
Let's personalize your content