found something that isn't AI related.

[da_667@infosec.exchange]

found something that isn't AI related. ^{Its corruption}

Nexcorium IoT botnet details:

www.fortinet.com/blog/threat-research/tracking-mirai-variant-nexcorium-a-vulnerability-driven-iot-botnet-campaign;

pretty easy to sig the payload retrieval attempt, as all the URIs in the analysis start with nexuscorp. and end in either (?:arm(?:5|6|7)?|mips|mpsl|x86)

[sharkfie@cyberplace.social]

@da_667 when I set a very simple honeypot ~~because I'm too lazy to develop a proper one~~ I kept seeing Mirai scanners identify themselves. I'm not complaining but it just seems like a bad strategy. Trying to deploy ARM binaries only too...

[da_667@infosec.exchange]

@sharkfie the mirai-like botnets are all incredibly basic and dumb, but somehow, they still get hosts. Its quite maddening.