Evasive Masjesu DDoS Botnet Targets IoT Devices

Security researchers at Trellix have uncovered details about Masjesu, a sophisticated botnet that's been targeting IoT devices for DDoS attacks since at least 2023. The malware infects routers and other connected devices through known vulnerabilities in D-Link, Netgear, Huawei, and other manufacturers' equipment, with most compromised devices located in Vietnam, Brazil, and India. Masjesu's operators advertise their attack services on Telegram to both Chinese and English-speaking customers, claiming capability to launch DDoS attacks reaching hundreds of gigabytes in magnitude.