Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Sunday April 12 2020, @04:17PM   Printer-friendly
from the tricky dept.

Meet dark_nexus, quite possibly the most potent IoT botnet ever:

A newly discovered botnet that preys on home routers, video recorders, and other network-connected devices is one of the most advanced Internet-of-things platforms ever seen, researchers said on Wednesday. Its list of advanced features includes the ability to disguise malicious traffic as benign, maintain persistence, and infect devices that run on at least 12 different CPUs[*].

Researchers from antivirus provider Bitdefender described the so-called dark_nexus as a "new IoT botnet packing new features and capabilities that put to shame most IoT botnets and malware that we've seen." In the three months that Bitdefender has tracked it, dark_nexus has undergone 30 version updates, as its developer has steadily added more features and capabilities.

The malware has infected at least 1,372 devices, which include video recorders, thermal cameras, and home and small office routers made by Dasan, Zhone, Dlink, and ASUS. Researchers expect more device models to be affected as dark_nexus development continues.

[...] The botnet has propagated both by guessing common administrator passwords and exploiting security vulnerabilities. Another feature that increases the number of infected devices is its ability to target systems that run on a wide range of CPUs[*]

[...] Bitdefender's report said that while the dark_nexus propagation modules contain code targeting ARC and Motorola RCE architectures, researchers have so far been unable to find malware samples compiled for these architectures.

[*] The executables are all statically linked and stripped. Except for x86 which has a 64-bit executable, all others are 32-bit. The targeted architectures are: arm5, arm6, arm7, mpsl, mips, i586, x86, spc, m68k, ppc, arc, sh4, rce. The researchers have examined samples of all of these except for arc and rce.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Monday April 13 2020, @09:50PM

    by Anonymous Coward on Monday April 13 2020, @09:50PM (#982247)

    I "apologized" to you TRANNY twisto https://soylentnews.org/comments.pl?cid=937346&sid=35327 [soylentnews.org] ? FUCK NO, not ever: That's NOT me but I DESTROYED YOU PUBLICLY on every level including proving you barb stalk me on THIS SITE https://soylentnews.org/comments.pl?noupdate=1&sid=33430&page=1&cid=889582#commentwrap [soylentnews.org] with more proof QUOTED FROM YOU DIRECTLY barbara (tom) hudson proving are a technical incompetent brain-damaged transsexual fool BULLSHIT ARTIST FUCKUP worthless creep that also failed on tech vs. me.

    My post LITERALLY also shows links to stopping hundreds of threats of MANY KINDS via hosts (since 99% of malicious threats online use hostnames - block them as I do in hosts (less overhead vs. ANYTHING else by FAR & pure kernelmode TCP/IP stack efficient no less)? Can't TOUCH you nor you it. That's ONLY a 1 year only as a sample and I'd done TONS MORE many hundreds more at slashdot before that and yes 99% use hostnames so hosts work against them harming you).

    So much for your usual lies barb and useless online troll chatterbox you has never done better work and I fairly challenged you to show you did. You have not.

    NOW: You RESORTING TO IMPERSONATING ME on your end only PROVES I really got to you barb/tom hudson tranny.

    So much so you are reduced to showing us your true scum bag self in fact. Thought YOU were going to SUE me? LMAO for what? FACTS ABOUT YOU??? LOL!

    * YOU WILL ALWAYS FAIL vs. me just as you FAILED @ being a MAN & since you couldn't GET ANY PUSSY you (lmao) DECIDED in your DRUG ADDLED BRAIN to SLICE OFF YOUR COCK & build your OWN pussy (only way you'd "get some", ever).... OMG!

    Only thing that "looks like SHIT" is you you FUCKED UP abomination of desolation freak.

    APK

    P.S.=> Hey FREAK? I'm going to PUBLICLY EMBARRASS YOUR ASS SO BAD on this site you will have to SLINK AROUND IN SHAME publicly but then, "your kind" (massive MASSIVE total losers in life) are USED to that, aren't you? You don't LIKE IT but I LOVE doing it, exposing you as the TRASH you are fucker... apk