The WailingCrab malware has evolved to increase its stealth and detection evasion by using MQTT protocol, which is not commonly used by malware and can easily blend into legitimate IoT traffic. The malware, delivered via spam campaigns and hosted on Discord, has a loader, injector, downloader, and backdoor components. Security precautions such as up-to-date antivirus software, patching, and added surveillance on MQTT protocol use are recommended to keep this sophisticated malware at bay.
Botnets leverage decade-old D-Link vulnerabilities in new attack campaigns
A new report from FortiGuard Labs has revealed the activities of two botnets, FICORA and CAPSAICIN, exploiting vulnerabilities in legacy D-Link devices. The report stresses