P2PInfect malware variant targets IoT devices

Cado Security Labs has discovered a new P2PInfect botnet variant posing a heightened threat by targeting IoT devices, particularly those with MIPS architecture. This expansion suggests the malware aims to compromise routers and IoT devices deliberately. The Rust-based P2PInfect, known since July 2023 for exploiting a Lua sandbox escape vulnerability, now conducts SSH brute-force attacks on 32-bit MIPS processors, using advanced evasion techniques and an embedded 64-bit Windows DLL module for Redis, indicating the involvement of a sophisticated threat actor.

https://www.iottechnews.com/news/2023/dec/04/p2pinfect-malware-variant-targets-iot-devices/