tuxnokill

Reported Context (3)

Notable items include the NGate NFC campaign in Brazil, new Mirai variants like “tuxnokill”, ProxySmart-powered SIM farm proxy networks, the Vercel breach, and defensive tools such as SmokedMeat and Scenario. Week in Review: Claude Mythos Finds 271 Firefox Vulnerabilities; Vercel Reports Breach
As for CVE-2025-29635, Akamai disclosed earlier this week that it recorded attempts against D-Link devices to deliver a Mirai botnet variant named “tuxnokill.” CISA Adds Four Actively Exploited Vulnerabilities to KEV, Sets May 8 Deadline
activity in March 2026 and found attackers download and run a multi-architecture Mirai variant called “tuxnokill,” while affected models reached end-of-life in November 2024, making vendor fixes unlikely. Mirai Campaign Exploits CVE-2025-29635 in End-of-Life D-Link Routers

CVE (8)

Malware (2)

People (5)

Threat Actors (4)

MITRE ATT&CK (8)

Vendors (12)

Products (16)

Tools (7)

Industries (2)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.