New botnet malware exploits two zero-days to infect NVRs and routers

A new malware botnet, InfectedSlurs, has been found exploiting two zero-day remote code execution (RCE) vulnerabilities to infect routers and video recorder devices to form a DDoS swarm. The botnet was discovered by cybersecurity company Akamai in October 2023 and it began its operations in late 2022. Akamai reports that the flaws have not been patched by vendors and that a fix is expected in December 2023.