Using Censys to Track the Murdoc Botnet Campaign Targeting AVTECH Cameras and Huawei Routers
ID: a3ee9ae1-61c4-5507-8770-6634392ae35b
STIX ID: report--a3ee9ae1-61c4-5507-8770-6634392ae35b
Feed Name: Censys Blog
Date Published: 2025-01-22
Date Updated: 2026-04-27
Author: Jean Pierre Ruiz Ocampo; Himaja Motheram
**Murdoc (Mirai variant) mass campaign:** Murdoc is actively exploiting CVE-2024-7029 (end-of-life AVTECH IP cameras) and CVE-2017-17215 (Huawei HG532 routers) to compromise devices, with Censys and GreyNoise telemetry showing hundreds of infected hosts and many exploit attempts; numerous exposed, unsupported AVTECH cameras remain on the internet and organizations are advised to isolate or replace affected devices.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
