Symantec Warns: Worm Can Target Internet of Things

Symantec researchers disclosed a worm called Linux.Darlloz that exploits a PHP vulnerability (CVE-2012-1823) to compromise Linux systems and is engineered with variants for embedded architectures (ARM, PPC, MIPS, MIPSEL), enabling potential IoT device infection; it spreads by scanning random IPs, attempting common credential logins, and issuing malicious HTTP POST requests to vulnerable PHP endpoints, though no confirmed non-PC device infections were observed in the wild at the time.