Malware
Nexcorium
- First Reported
- Apr 18, 2026
- Latest Reported
- May 9, 2026
Reported Context (2)
- CVE-2024-3721 in TBK DVR-4104 and DVR-4216 devices to install the multi-architecture Mirai variant Nexcorium, which uses downloader scripts, persistence tricks, brute-force login attempts, and DDoS modules. FortiGuard Details Nexcorium IoT Botnet Campaign Exploiting TBK DVR Flaw
- vulnerabilities in TBK DVRs and end-of-life TP-Link routers to deploy Mirai-like botnets, including a Nexcorium variant. Nexcorium Botnet Exploits TBK DVR Flaw as Attackers Probe EoL TP-Link Routers
CVE (3)
Malware (3)
People (4)
Threat Actors (1)
MITRE ATT&CK (14)
Vendors (3)
Products (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
