logo

Using Censys to Track the Murdoc Botnet Campaign Targeting AVTECH Cameras and Huawei Routers

ID: a3ee9ae1-61c4-5507-8770-6634392ae35b

STIX ID: report--a3ee9ae1-61c4-5507-8770-6634392ae35b

Feed Name: Censys Blog

Threat Score
70/100

Date Published: 2025-01-22

Date Updated: 2026-04-27

Author: Jean Pierre Ruiz Ocampo; Himaja Motheram

...
...

**Murdoc (Mirai variant) mass campaign:** Murdoc is actively exploiting CVE-2024-7029 (end-of-life AVTECH IP cameras) and CVE-2017-17215 (Huawei HG532 routers) to compromise devices, with Censys and GreyNoise telemetry showing hundreds of infected hosts and many exploit attempts; numerous exposed, unsupported AVTECH cameras remain on the internet and organizations are advised to isolate or replace affected devices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.