New Mirai Variant Nexcorium Hijacks DVR Devices for DDoS Attacks

Fortinet’s FortiGuard Labs discovered Nexcorium, a Mirai-style IoT botnet malware actively targeting DVR video recording devices (especially TBK DVR-4104 and DVR-4216) by exploiting CVE-2024-3721 and other known vulnerabilities; Nexcorium is multi-architecture, persists across reboots, spreads via brute-force using a large hardcoded password list, and is used to assemble DDoS-capable botnets with attribution to a group calling itself Nexus Team.