Menu

  • Alerts
  • Incidents
  • News
  • APTs
  • Cyber Decoded
  • Cyber Hygiene
  • Cyber Review
  • Cyber Tips
  • Definitions
  • Malware
  • Threat Actors
  • Tutorials

Useful Tools

  • Password generator
  • Report an incident
  • Report to authorities
No Result
View All Result
CTF Hack Havoc
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
Hall of Hacks
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
No Result
View All Result
Hall of Hacks
CyberMaterial
No Result
View All Result
Home Alerts

TheMoon Malware Strikes 40,000 Devices

March 26, 2024
Reading Time: 2 mins read
in Alerts
TheMoon Malware Strikes 40,000 Devices

A new strain of TheMoon malware has emerged, infecting a significant number of outdated small home/small office (SOHO) routers and IoT devices worldwide. The Black Lotus Labs team at Lumen Technologies discovered this updated version targeting end-of-life devices, with the malware making its presence known by infecting thousands of devices in 88 countries. The Moon botnet, initially detected in 2014, has evolved over the years, with operators integrating at least 6 IoT device exploits into its code. Notorious for its targeting of routers from various vendors, the botnet has caused widespread concern due to its extensive reach and potential for malicious activities.

The infection chain initiated by TheMoon malware typically involves a lightweight loader file that checks for specific shells before executing the subsequent payload. The malware establishes rules to control incoming TCP traffic, connects to NTP servers for internet connection verification, and eventually communicates with hardcoded IP addresses to receive instructions from the command-and-control server. The discovery of this new variant underscores the ongoing battle against sophisticated malware strains and emphasizes the importance of cybersecurity measures to safeguard vulnerable devices from such threats.

Reference:
  • Escalation of TheMoon Malware Threat Worldwide

Tags: Black Lotus LabsCyber AlertCyber Alerts 2024Cyber RiskCyber threatLumen TechnologiesMarch 2024TheMoon
ADVERTISEMENT

Related Posts

Mozilla Security Advisory AV25-529

RingReaper Malware Hits Linux Servers

August 20, 2025
Mozilla Security Advisory AV25-529

Mozilla Security Advisory AV25-529

August 20, 2025
Mozilla Security Advisory AV25-529

Microsoft Issues Windows Fix Update

August 20, 2025
PyPI Blocks 1800 Expired Domain Emails

PyPI Blocks 1800 Expired Domain Emails

August 19, 2025
PyPI Blocks 1800 Expired Domain Emails

Noodlophile Infostealer Uses Fake Notices

August 19, 2025
PyPI Blocks 1800 Expired Domain Emails

XenoRAT Malware Hits South Korea Embassies

August 19, 2025

Latest Alerts

RingReaper Malware Hits Linux Servers

Mozilla Security Advisory AV25-529

Microsoft Issues Windows Fix Update

XenoRAT Malware Hits South Korea Embassies

Noodlophile Infostealer Uses Fake Notices

PyPI Blocks 1800 Expired Domain Emails

Subscribe to our newsletter

    Latest Incidents

    NY Business Council Data Breach Hits 47K

    Ransomware Gang Hacks Inotiv Firm

    Intel Employee Data Exposure Flaw

    Hackers Claim Sale of 15.8M PayPal Logins

    Allianz Life Breach Hits 1.1M Customers

    iiNet Breach Exposes 280K Records

    CyberMaterial Logo
    • About Us
    • Contact Us
    • Jobs
    • Legal and Privacy Policy
    • Site Map

    © 2025 | CyberMaterial | All rights reserved

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In

    Add New Playlist

    No Result
    View All Result
    • Alerts
    • Incidents
    • News
    • Cyber Decoded
    • Cyber Hygiene
    • Cyber Review
    • Definitions
    • Malware
    • Cyber Tips
    • Tutorials
    • Advanced Persistent Threats
    • Threat Actors
    • Report an incident
    • Password Generator
    • About Us
    • Contact Us
    • Advertise with us

    Copyright © 2025 CyberMaterial