Botnet
A network of compromised devices, often routers, cameras and other IoT equipment, that an attacker controls remotely and uses for DDoS attacks, spam or as proxies to hide other attacks. Internet-facing devices with default passwords or end-of-life firmware are easy recruits, so change default credentials, keep firmware current and do not expose management interfaces to the internet.
Further reading: csrc.nist.gov
Advisories that mention this term
XCPE Botnet: Android Set-Top Boxes Shipped with Preloaded Backdoor; ~88,000 Devices Infected in Taiwan, 5th Globally
Following Google's disclosure of the XCPE botnet, cybersecurity vendor TrendAI published observations from June 3 to October 1 showing approximately 1.
US, UK and partners name China's Integrity Tech for enabling hacks of critical infrastructure edge devices
CISA, the FBI, the NSA and international partners warned that Integrity Technology Group, a China-based cybersecurity company with ties to the Chinese government, is enabling threat actors to target multiple critical infrastructure sectors worldwide .
CISA Releases Androxgh0st Malware Advisory Warning of Cloud Credential Theft
On 2024-01-16, the FBI and CISA released a joint cybersecurity advisory detailing indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with Androxgh0st malware .