Hundreds of DVRs and routers are being hijacked to form another major botnet

• TBK DVRs and Four-Faith routers are carrying known, old security flaws
• The flaws were used to build Mirai botnet in the past, and are now used to build RondoDox, too
• Users are advised to patch, firewall, or replace vulnerable endpoints

A new malicious botnet, called RondoDox, is being built at this very moment, potentially targeting thousands of products around the world e xperts have warned.

Cybersecurity researchers from Fortinet FortiGuard Labs, who said they saw multiple vulnerabilities in different digital video recorders (DVR) and routers being exploited to create the botnet.

The vulnerabilities in question are tracked as CVE-2024-3721, and CVE-2024-12856. These two were found in TBK digital video recorders, models DVR-4104 and DVR-4216, as well as in Four-Faith routers, models F3x24 and F3x36.

Defending your endpoints

According to BleepingComputer, the flaws were exploited before ...