{"id":5062,"date":"2024-08-28T16:00:08","date_gmt":"2024-08-28T21:00:08","guid":{"rendered":"https:\/\/www.darkreading.com\/ics-ot-security\/cctv-zero-day-targeted-by-mirai-botnet-campaign"},"modified":"2024-08-28T16:00:08","modified_gmt":"2024-08-28T21:00:08","slug":"cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/08\/28\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet\/","title":{"rendered":"CCTV Zero-Day Exposes Critical Infrastructure to Mirai Botnet"},"content":{"rendered":"
<\/a><\/div>\n
<\/div>\n

Industrial control systems and critical infrastructure operators are being warned about a campaign leveraging a known zero-day vulnerability in remote monitoring cameras to spread Mirai cryptominer botnets.<\/span><\/p>\n

Researchers at Akamai found the <\/span>Mirai cryptominer botnet campaign<\/a><\/span> was exploiting a variety of previously disclosed vulnerabilities, but was notably focused on a zero-day command injection vulnerability in AVTECH closed-circuit television (CCTV) cameras tracked under CVE-2024-7029.<\/span><\/p>\n

Affected camera models have been discontinued but are still in wide use across critical infrastructure, Akamai’s researchers noted. There is no patch available and operators are being advised to rip out the affected devices and replace them with a more secure alternative.<\/span><\/p>\n

“If there is no way to remediate a threat, decommissioning the hardware and software is the recommended way to mitigate security risks and lower the risk of regulatory fines,” Akamai researchers advised.<\/span><\/p>\n

On Aug. 1, the Cybersecurity and Infrastructure Security Agency (CISA) published an industrial control systems (ICS) advisory on the AVTECH IP camera zero-day, specifically citing the devices’ <\/span>use across critical infrastructure<\/a><\/span> sectors, including commercial facilities, financial services, healthcare, and public health.<\/span><\/p>\n

The Akamai researchers explained the <\/span>zero-day vulnerability<\/a><\/span> was already known and being used in cyberattacks to spread malware, long before it was formally assigned a CVE. This tack is increasingly popular among threat groups, the researchers said.<\/span><\/p>\n

“A vulnerability without a formal CVE assignment may still pose a threat to your organization \u2014 in fact, it could be a significant threat,” Akamai’s team said in its report. “Malicious actors who operate these botnets have been using new or under-the-radar vulnerabilities to proliferate malware.”<\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Industrial control systems and critical infrastructure operators are being warned<\/p>\n","protected":false},"author":12,"featured_media":5063,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-5062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=2342%2C1316&ssl=1",2342,1316,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=300%2C169&ssl=1",300,169,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=640%2C360&ssl=1",640,360,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=640%2C359&ssl=1",640,359,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=1536%2C863&ssl=1",1536,863,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=2048%2C1151&ssl=1",2048,1151,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=1024%2C575&ssl=1",1024,575,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/08\/cctv-zero-day-exposes-critical-infrastructure-to-mirai-botnet.png?fit=2342%2C1316&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/5062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=5062"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/5062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/5063"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=5062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=5062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=5062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}