logo

Eleven11bot Captures 86,000 IoT Devices for DDoS Attacks

ID: 21f9ad9f-85dd-547e-8a5b-58db06c8fe50

STIX ID: report--21f9ad9f-85dd-547e-8a5b-58db06c8fe50

Feed Name: Security Boulevard

Threat Score
75/100

Date Published: 2025-03-05

Date Updated: 2026-04-22

Author: Jeffrey Burt

...
...

Researchers have identified Eleven11bot, a rapidly growing IoT botnet of tens of thousands of compromised security cameras and NVRs, launching sustained, large-scale DDoS attacks (ranging from hundreds of thousands to hyper‑volumetric attacks) against targets such as telecommunications and gaming infrastructure; the botnet propagates via brute-force logins, default/hardcoded credentials and exposed Telnet/SSH services, with significant device counts reported worldwide and substantial portions traced to devices in Iran.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.