Russian Script Kiddie Assembles Massive DDoS Botnet

Matrix, a criminal actor, has built a large DDoS botnet by modifying publicly available tools (Mirai and others), brute-forcing weak/default credentials, and exploiting known vulnerabilities (including CVE-2024-27348). The actor scans cloud provider IP ranges and IoT devices, offers tiered DDoS-for-hire services via Telegram, and may control hundreds of thousands of devices if even a small percentage of targets are exploitable.