Shoddy Supply Chain Lurks Behind Mirai Botnet

Flashpoint analysis found that hard-coded default credentials and an authentication bypass in XiongMai Technologies’ NetSurveillance/CMS firmware allowed Mirai malware to infect over 500,000 DVRs, NVRs, and IP cameras, which were then used to launch massive DDoS attacks (exceeding 600–700 Gbps against targets such as KrebsOnSecurity and OVH); the issue is tracked as CVE-2016-1000245 and highlights critical supply-chain and IoT security failures.