MIRAI BOTNETS EXPLOITING WAZUH SECURITY PLATFORM VULNERABILITY

Summary from the TLDR InfoSec newsletter

Researchers from Akamai are warning of two Mirai botnet campaigns exploiting a remote code execution vulnerability in the open-source security platform Wazuh. The first campaign has been active since March and uses a malicious shell script to download the Mirai payload. The second campaign seems to be targeting Italian-speaking users.