Tag: nexcorium

1 Attack Reports | 0 Vulnerabilities

Attack reports

Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign

Nexcorium is a multi-architecture Mirai variant exploiting CVE-2024-3721 in TBK DVR devices to build a botnet for distributed denial-of-service attacks. The campaign, attributed to Nexus Team based on custom HTTP headers, uses OS command injection to deliver malware across ARM, MIPS, and x86-64 arc…

persistence mechanisms

multi-architecture

credential brute-force

tbk dvr exploitation

Published: April 17, 2026

Linked vulnerabilities : CVE-2017-17215, CVE-2024-3721

Downloadable IOCs: 14

Click here to see more Attack Reports