scarleast

Nsfocus IC IoT Security researcher

[scarleast @scarleast]

We captured a variant of Mirai using Tea LaTex 1.0 - RCE exploit from 180.178.111.74. The vulnerability was published on ExploitDB(EDB-ID:48805) on 20200911, and only 5 days elapsed from disclosure to exploitation.

url: http://193.169.254.116/tea32.sh #threatintel #DDoS #Malware