New ShadowV2 botnet malware used AWS outage as a test opportunity

ShadowV2 is a Mirai-based IoT botnet observed by FortiGuard that leveraged at least eight known vulnerabilities (affecting D-Link, TP-Link, DD-WRT, DigiEver, TBK, etc.) to infect routers, NAS devices and DVRs globally; it used a downloader (binary.sh) fetched from 81.88.18.108 and a C2 at 198.199.72.27 to deliver a Mirai-like binary supporting multiple UDP/TCP/HTTP DDoS flood types, with Fortinet publishing IoCs and urging firmware updates and mitigation.