logo

Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai

ID: 2f09686e-7c55-5299-a77b-c89e55969a94

STIX ID: report--2f09686e-7c55-5299-a77b-c89e55969a94

Feed Name: Qualys Blog

Threat Score
72/100

Date Published: 2025-01-21

Date Updated: 2026-04-28

Author: Shilpesh Trivedi

...
...

Murdoc Botnet is an active Mirai variant campaign (started July 2024) exploiting AVTECH camera and Huawei HG532 router vulnerabilities to install ELF and shell-script payloads on IoT devices, with reported widespread infection (1300+ active IPs, 100+ C2 server groups, 500+ samples) and provided IOCs and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.