FlagThis

A newly discovered botnet, Eleven11bot, has infected over 30,000 internet-connected devices. These compromised devices, primarily security cameras and Network Video Recorders (NVRs), are being actively used to launch Distributed Denial of Service (DDoS) attacks. The botnet's malicious activity has been directed towards critical telecom infrastructure and gaming websites, causing significant disruptions.

The activity of Eleven11bot has been traced back to Iran, with the infected devices distributed globally. Security researchers have discovered the botnet is being used to carry out brute force attacks on login pages. Weak or reused passwords are being exploited to take control of vulnerable devices. Regular updates to device firmware, frequent password changes, and disabling remote access can significantly reduce the risk of these breaches.

ImgSrc: mnwa9ap4czgf-u1

References :

• CyberInsider: Massive DDoS Botnet Eleven11bot Infects 30,000+ IoT Devices
• www.cybersecurity-insiders.com: DDoS attacks by 30k botnets and IBM n Vodafone safe internet from quantum computing attacks
• securityaffairs.com: New Eleven11bot botnet infected +86K IoT devices
• www.scworld.com: Over 86K devices impacted by novel global Eleven11bot botnet
• www.techradar.com: Another huge new botnet is infecting thousands of webcams and video recorders for DDoS attacks
• aboutdfir.com: Massive botnet that appeared overnight is delivering record-size DDoSes A newly discovered network botnet comprising an estimated 30,000 webcams and video recorders—with the largest concentration in the US—has been delivering what is likely to be the biggest denial-of-service attack ever seen, a security researcher inside Nokia said.
• The GreyNoise Blog: A newly discovered global cyber threat is rapidly expanding, infecting tens of thousands of internet-connected devices to launch powerful cyberattacks.
• WIRED: Eleven11bot infects webcams and video recorders, with a large concentration in the US.

Classification:

• HashTags: #DDoS #Botnet #IoTsecurity
• Company: Nokia Deepfield
• Target: telecom providers and gaming platforms
• Attacker: Eleven11bot
• Product: security cameras and NVRs
• Feature: DDoS attacks
• Malware: Eleven11bot
• Type: Botnet
• Severity: Major