T1584.005Resource Development
Botnet
Adversaries may compromise numerous third-party systems to form a botnet that can be used during targeting. A botnet is a network of compromised systems that can be instructed to perform coordinated tasks. Instead of purchasing/renting a botnet from a booter/stresser service, adversaries may build their own botnet by compromising numerous third-party systems. Adversaries may also conduct a…
CVEs2
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.2
Reports0
CVEs linked to Botnet
2 CVEs, by priority. Each link shows its badge.- CVE-2020-25506D-Link DNS-320 Device Command Injection VulnerabilityD-Link · DNS-320 DeviceKEVPublic exploitCritical · 9.8T1584.005BotnetT1133External Remote Services+1 more · 1 reportMITRE CTID mapping of the KEV entry · follow-on activity>99.9%Top 0.02%73.7priority
- CVE-2020-29557D-Link DIR-825 R1 Devices Buffer Overflow VulnerabilityD-Link · DIR-825 R1 DevicesKEVPublic exploitCritical · 9.8T1584.005BotnetT1190Exploit Public-Facing Application+1 moreMITRE CTID mapping of the KEV entry · follow-on activity55.7%Top 0.96%69.7priority