<![CDATA[found something that isn't AI related.]]>found something that isn't AI related. Its corruption

Nexcorium IoT botnet details:

www.fortinet.com/blog/threat-research/tracking-mirai-variant-nexcorium-a-vulnerability-driven-iot-botnet-campaign;

pretty easy to sig the payload retrieval attempt, as all the URIs in the analysis start with nexuscorp. and end in either (?:arm(?:5|6|7)?|mips|mpsl|x86)

]]>https://board.circlewithadot.net/topic/1e8e34ae-7e61-4257-9603-c0a2beefde35/found-something-that-isn-t-ai-related.RSS for NodeFri, 01 May 2026 07:58:30 GMTTue, 28 Apr 2026 16:51:42 GMT60<![CDATA[Reply to found something that isn't AI related. on Tue, 28 Apr 2026 17:14:47 GMT]]>@sharkfie the mirai-like botnets are all incredibly basic and dumb, but somehow, they still get hosts. Its quite maddening.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116483456185053935https://board.circlewithadot.net/post/https://infosec.exchange/users/da_667/statuses/116483456185053935Tue, 28 Apr 2026 17:14:47 GMT<![CDATA[Reply to found something that isn't AI related. on Tue, 28 Apr 2026 17:07:00 GMT]]>@da_667 when I set a very simple honeypot ~~because I'm too lazy to develop a proper one~~ I kept seeing Mirai scanners identify themselves. I'm not complaining but it just seems like a bad strategy. Trying to deploy ARM binaries only too...

]]>https://board.circlewithadot.net/post/https://cyberplace.social/ap/users/116440692978306561/statuses/116483425587355979https://board.circlewithadot.net/post/https://cyberplace.social/ap/users/116440692978306561/statuses/116483425587355979Tue, 28 Apr 2026 17:07:00 GMT