InfectedSlurs (DDoS Botnet)

 InfectedSlurs Botnet Profile

Primary Activity: Utilizes the JenX Mirai malware variant, part of the Mirai botnet cluster.

Target: Internet of Things (IoT) devices.

Command and Control (C2) Characteristics: Limited C2 domain resolutions, indicating targeted infrastructure use.

Naming Conventions: Domains often contain offensive language.

Unique Behavior: Prints distinct hard-coded strings upon device compromise.

MITRE ATT&CK Techniques:

• T1065: Uncommonly Used Port
• T1190: Exploit Public-Facing Application
• T1078: Valid Accounts
• T1486: Data Encoded
• T1046: Network Service Scanning

Captain's Note: Corsairs, the InfectedSlurs botnet marks a notorious turn in the cyber seas. Its exploitation of IoT vulnerabilities and cunning use of offensive domain naming requires our unwavering vigilance. Stay alert, and keep your digital armor well-fortified against such stealthy threats.