Closed Circuit Cameras, NAS Devices Enrolled in Botnet

Imperva researchers observed a botnet of roughly 900 CCTV cameras running embedded Linux (BusyBox) infected with a Lightaidra variant that participated in an HTTP GET DDoS against a cloud service (≈20,000 requests/sec). The cameras were likely compromised via default vendor credentials and Telnet/SSH brute-force, illustrating widespread risk from poorly managed IP-enabled cameras and similar IoT devices (NAS and SOHO routers) used in distributed denial-of-service campaigns.