Evasive Masjesu DDoS Botnet Targets IoT Devices

The Masjesu botnet is a critical threat targeting IoT devices with a focus on persistence rather than widespread infection. It avoids blacklisted IP addresses and critical infrastructure, indicating an evasive and selective infection strategy. The botnet is used to conduct distributed denial-of-service (DDoS) attacks. No known exploits in the wild or specific affected versions are identified, and no patches or mitigations have been provided.

• securityweek.com/evasive-masjesu-ddos-botnet-targets-iot-devices/ (opens in a new tab)

• CVE-2026-115417: aws-c-mqtt · Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapterHighVulnerability2026-10-22
• PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP FlawsExploitedVulnerability2026-10-21
• Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisorsHighVulnerability2026-10-15
• Canonical Websites Disrupted in Second DDoS Attack This YearNews2026-10-12
• Cybersecurity Tokenomics: Denial of Wallet Attacks and the Cost of SOC Operations | Kaspersky official blogAnalysis2026-10-07