Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices

This article covers Masjesu (XorBot), a DDoS-for-hire botnet targeting IoT devices globally since 2023.

• •Advertised on Telegram; targets routers, cameras, DVRs, and NVRs across multiple architectures.
• •Uses XOR-based encryption to hide strings and configurations, deliberately avoiding DoD IP ranges for long-term stealth.
• •Exploits 12+ vulnerabilities in D-Link, Huawei, NETGEAR, and TP-Link devices to gain initial access.
• •Attack traffic originates mainly from Vietnam (~50%), Ukraine, Iran, and Brazil, targeting CDNs, game servers, and enterprises.
• •Avoids critical infrastructure targets to minimize law enforcement attention and improve survivability.

This summary was automatically generated by AI based on the original article and may not be fully accurate.