New P2Pinfect Variant: Malware’s Threat Actors Increasingly Targeting IoT, Routers, Embedded Devices

Since Cado Security Labs’ recent  discovery, its researchers have been monitoring and reporting the exponential growth of the P2Pinfect malware, which acts as a cross-platform botnet agent exploiting cloud environments.

Today Cado Security will reveal a new P2Pinfect variant compiled for the Microprocessor without Interlocked Pipelined Stages (MIPS) architecture that its researchers have discovered. 

This novel discovery demonstrates that the threat actors behind P2P2infect are increasingly targeting routers, IoT, and other embedded devices. 

The new sample includes updated evasion mechanisms, making it more difficult for researchers to analyze dynamically, including Virtual Machine (VM) detection methods for embedded payloads, debugger detection, and anti-forensics on Linux hosts.

You can read the details here.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading