Persirai Botnet: 120,000 Hacked Cameras Phoning Home To Iran

Trend Micro reported discovery of the Persirai botnet: approximately 120,000 IP cameras across more than 1,000 models are being compromised by abusing UPnP and a known firmware vulnerability to deliver in-memory malware that phones home to command-and-control servers (reported to be in Iran); the hijacked cameras can be used for DDoS and to propagate further compromises, with default passwords and lack of vendor patches cited as contributing factors.