November 24, 2024
Rewterz Threat Alert – GuLoader Malspam Campaign – Active IOCs
June 17, 2022
Rewterz Threat Alert – LokiBot Malware – Active IOCs
June 17, 2022
Rewterz Threat Alert – GuLoader Malspam Campaign – Active IOCs
June 17, 2022
Rewterz Threat Alert – LokiBot Malware – Active IOCs
June 17, 2022
Severity
High
Analysis Summary
A new Mirai variant is making the rounds called mirai_pteamirai. The botnet exploits a vulnerability in KGUARD DVR to spread within an environment. The vulnerability exists in the 2016 firmware version and is fixed in any version after the 2017 release. This botnet is active and used to cause DDoS conditions.
Impact
- Server Outage
- Data Loss
- Website Downtime
Indicators of Compromise
MD5
- 145a7f648f5d695bc578033a7b70d78f
SHA-256
- 085c715ddd74c14dc3ff079dfd47829d591237b066ab1dfa1cbf26a768a0ada3
SHA-1
- 65f90b7a0419bbea539af08cd144a5edf44d2f63
Remediation
- Block all threat indicators at your respective controls.
- Search for IOCs in your environment.