Watch out, your office phone could be hijacked into a Mirai botnet

A vulnerability in Mitel phones is being abused once again
Hackers are using the bug to deploy a variant of Mirai and run DDoS attacks
The variant is called Aquabot and comes with a few unique features

Security researchers from Akamai have caught a new variant of the infamous Mirai botnet targeting business phone devices built by Mitel.

Mitel provides business communication solutions, including VoIP, unified communications, and contact center services, but according to Akamai, the devices – namely Mitel 6800, 6900, and 6900w series of SIP desk phones, together with the 6970 Conference Unit, running on firmware R6.4.0.HF1 (R6.4.0.136) – are vulnerable to a command injection flaw tracked as CVE-2024-41710.

This is a medium-severity bug (6.8/10) that allows an attacker to execute arbitrary commands within the context of the system.

Reporting counter-attacks

A threat actor took advantage of this flaw to deploy Aquabotv3, a new variant of Mirai, arguably the most destructive botnet out there. Aquabot allows its operators to run Distributed Denial of Service (DDoS) attacks.

This version also comes with a unique and uncommon feature that most likely serves to help threat actors track the health of the botnet. When a victim spots the malware on its device and tries to remove it, Aquabot will react and send the information about the attempt back to its command & control (C2) server.

The best way to defend against Aquabot and other Mirai variants is to keep the endpoints updated. Mitel patched this particular vulnerability in July 2024, so if you’re using these phones in your organization, make sure to apply the patch to mitigate any risks.

Mirai and its variants continue to wreak havoc across cyberspace. In the last 30 days alone, there have been multiple news reports of different Mirai variants being spotted in the wild. For example, researchers from Juniper recently warned about a Mirai variant in late December 2024, and in early January 2025, Chinese researchers discovered a variant of Mirai with an offensive name targeting industrial routers.

Via The Register

https://cdn.mos.cms.futurecdn.net/j5nuKLHzdc57fYKR4rjqeR-1200-80.jpg

Source link

Forget fancy new features, it’s time for Apple to make sure that iOS just works again

This wild mechanical keyboard has a 10-inch screen, RGB lighting, and feels totally unnecessary

The upcoming Samsung tri-fold phone may take a while to charge up

‘It was Keanu’s idea’: The ending of Ballerina is meant to honor the second John Wick movie’s final scene, director confirms

Ex-Israeli Intelligence Official: Shockwaves of Trump’s “Take Over Gaza” Heard, Felt Across Region

What UK political parties are promising in the 2019 general election

Otto Warmbier’s parents want North Korea to suffer for their son’s death

Could a ‘youthquake’ cause Boris Johnson to lose the general election?

Which Celebrity Styles Americans Copy Most in 2025: New Study

New ‘Westworld’ trailer introduces us to another dystopian tech company

What’s the point of ‘Charlie’s Angels’ without Sam Rockwell dancing?

These striking photos capture the future of human flight

Israel plans to bring budget deficit below 3% of GDP for 2026-28

Russia advances to east-central Ukrainian region amid row over dead soldiers

US stocks edge toward records with inflation data, policy progress in focus

The City of Bentonville, AR Renews Partnership with GovDeals to Sell Surplus Properties

The YouTuber who has become one of Gen Z’s most beloved celebrities

26 last-minute holiday gifts that are still thoughtful and unique

Practicing gratitude regularly can make you less stressed and sleep better

8 things millennials wish you would just stop getting them for the holidays

Watch out, your office phone could be hijacked into a Mirai botnet

Forget fancy new features, it’s time for Apple to make sure that iOS just works again

Israel plans to bring budget deficit below 3% of GDP for 2026-28

This wild mechanical keyboard has a 10-inch screen, RGB lighting, and feels totally unnecessary

The upcoming Samsung tri-fold phone may take a while to charge up