THREATOPS
THREAT OPSThreat News › Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign

Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign

lowfortinet_researchPublished 2026-04-17

<p>TBK DVRs targeted by Nexcorium: exploiting, persisting, brute-force attacks, and multi-architecture Mirai-style DDoS in a single campaign. From CVE-2024-3721 exploitation to CVE-2017-17215 reuse, this botnet demonstrates how quickly IoT threats continue to evolve.</p><img align="left" alt="" border="0" height="1" hspace="0" src="https://feeds.fortinet.com/~/i/953946956/0/fortinet/blog/threat-re

Indicators of compromise

Original source: https://feeds.fortinet.com/~/953946956/0/fortinet/blog/threat-research~Tracking-Mirai-Variant-Nexcorium-A-VulnerabilityDriven-IoT-Botnet-Campaign