March 11, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Alert – PatchWork APT Group Targeting Government of Pakistan – Active IOCs
August 13, 2022Rewterz Threat Advisory – ICS: Siemens Simcenter STAR-CCM+ Vulnerability
August 15, 2022Rewterz Threat Alert – PatchWork APT Group Targeting Government of Pakistan – Active IOCs
August 13, 2022Rewterz Threat Advisory – ICS: Siemens Simcenter STAR-CCM+ Vulnerability
August 15, 2022
Severity
High
Analysis Summary
A new Mirai variant is making the rounds called mirai_pteamirai. This botnet is one of the significant botnets targeting exposed networking devices running Linux. Mirai means ‘future’ in Japanese. This botnet is one of the active botnet and used to cause DDoS conditions. IP cameras, home routers, and other IoT devices are the common targets of this botnet.
Impact
- Server Outage
- Data Loss
- Website Downtime
Indicators of Compromise
MD5
- 760c6bf23ba40832f3c4b7fe5a3a6895
- 1172c5f5508cffaa71080aa31b8f6641
- c8cb09695a2078a957e524b136aa4e4a
- c3e0ac6dff87420fed2e4f7b8b480b50
SHA-256
- c3ae2e11517ba34670215953429f1b1353315012c9cf27c7657ceec6c01e6dbf
- 0d641ad751ce3774f85c8b4d1ea0f10763b31013c16bef8d27599d67aa2a8c1d
- af2347fd312ad8291822cccd3ca76fad407e1a81e9319ba5c5db29ce302d6af0
- fa5eb81125c91825d50a6be567bdadf41c1af5cb514f44480268dee3a0240828
SHA-1
- 3db77c99969cf361ee4016b3e96b4ca1a6bf5dbc
- e8804bee5bb185504c515c81fb7bb6db7def6618
- 7a6577734fae3c9cab0a833e944badb087c72147
- 8ee3e579971790541f4c1cda6912b6e73b7a7415
Remediation
- Upgrade your operating system.
- Don’t open files and links from unknown sources.
- Install and run anti-virus scans.