New Mirai botnet targets industrial routers with zero-day exploits

A Mirai-based botnet discovered in February has evolved to use more than 20 public and custom exploits — including an observed zero-day (CVE-2024-12856 affecting Four-Faith industrial routers) — to compromise DVRs, routers, and smart home devices worldwide; it maintains ≈15,000 daily active nodes and performs short, high-intensity DDoS attacks exceeding 100 Gbps, using Telnet brute-force, custom UPX packing, and Mirai-derived command structures to propagate and execute attacks.