"New 'Goldoon' Botnet Targets D-Link Routers With Decade-Old Flaw"

A new botnet called "Goldoon" targets D-Link routers by exploiting a nearly decade-old critical security flaw to launch more attacks. The vulnerability, tracked as CVE-2015-2051 with a CVSS score of 9.8, impacts D-Link DIR-645 routers and enables remote attackers to execute arbitrary commands via specially crafted HTTP requests. According to Fortinet FortiGuard Labs researchers, attackers can gain complete control of a compromised device, extract system information, communicate with a Command-and-Control (C2) server, and more. Telemetry data shows a Goldoon botnet activity spike on April 9, 2024. This article continues to discuss findings regarding the Goldoon botnet.

THN reports "New 'Goldoon' Botnet Targets D-Link Routers With Decade-Old Flaw"

Submitted by grigby1