Trusted Design

NCCIC / US-CERT: IB-17-20217-Indicators Related to IOT_Reaper Malware

概要

On October 24, 2017, a trusted third party reported IOCs related to IOT_Reaper malware. Open source and trusted third party reports identified malware samples that are used to compromise vulnerable internet-of-things (IoT) devices. The compromised devices can then be used in a botnet. Some of the malware code originated from the Mirai botnet; however, IoT_Reaper exploits vulnerabilities whereas Mirai exploited default usernames and credentials on IoT devices. According to another trusted third party, IoT_Reaper is a new Internet-of-Things (IoT) botnet that uses a collection of known vulnerabilities that target internet routers, including the D-Link 1, D-Link 2, NETGEAR 1, NETGEAR 2, Linksys, GoAhead, JAWS, Vacron, and AVTECH models. There have also been reports of the botnet attempting to exploit MicroTik and TP-Link routers, Synology devices, and Linux servers. IoT_Reaper may have infected as many as two million IoT devices, which are difficult to patch.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• RickRolled by none other than IoTReaper | News from the Lab (score: 0.77)
• The Reaper is finally here and he has come for your IoT Devices Mjolnir Security (score: 0.75)
• IoT_reaper: A Rapid Spreading New IoT Botnet (score: 0.71)
• IoT_reaper: A Rappid Spreading New IoT Botnet (score: 0.70)
• IoTroop Botnet The Full Investigation (score: 0.68)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る