Bashlite Updated with Mining and Backdoor Commands

Executive summary: The report analyzes a variant of the Bashlite IoT botnet that abuses a Metasploit RCE against WeMo UPnP-enabled devices to deploy a dropper which fetches architecture-specific payloads; the malware provides multiple DDoS flood commands, backdoor functions, cryptocurrency-mining and bricking capabilities, and includes C2 IPs, SHA-256 hashes, and malicious URLs observed in the wild across several countries, with vendor disclosure and mitigation guidance provided.