Mirai Botnet Spinoffs Unleash Global Wave of DDoS Attacks

Security researchers from Qualys and Trend Micro report active Mirai-derived botnet campaigns — including a Murdoc_Botnet variant — that are exploiting CVE-2024-7029, CVE-2017-17215 and weak/default credentials to compromise IP cameras, routers and other IoT devices worldwide, building large botnets used for volumetric and session-exhaustion DDoS attacks against organizations across North America, Europe and Asia; the reports include sample counts, geographic distribution of infected IPs, observed attack vectors, and recommended mitigations such as traffic filtering, credential hygiene, and monitoring for suspicious scripts and processes.