{"id":13006,"date":"2016-11-29T09:24:32","date_gmt":"2016-11-29T09:24:32","guid":{"rendered":"http:\/\/www.ispreview.co.uk\/?p=13006"},"modified":"2016-12-02T08:49:07","modified_gmt":"2016-12-02T08:49:07","slug":"talktalk-isp-routers-potentially-vulnerable-new-mirai-worm","status":"publish","type":"post","link":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html","title":{"rendered":"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm"},"content":{"rendered":"<p>It&#8217;s spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband routers at other European ISPs (900,000+ in Germany), may soon begin to hit devices in the United Kingdom too, such as <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/tt\" rel=\"nofollow\" target=\"_blank\">TalkTalk<\/a>&#8217;s D-Link <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">DSL<\/a>-3780 kit.<\/p>\n<p><!--more--><\/p>\n<p>The <strong>Mirai<\/strong> malware first came to light a couple of months ago after it infected a huge number of popular Internet connected devices, such as surveillance cameras and DVRs, which were then hijacked and turned into a gigantic botnet that was harnessed by hackers for conducting massive <strong>Distributed Denial of Service<\/strong> (DDoS) attacks.<\/p>\n<p>Since then somebody has modified Mirai and enabled it to exploit weaknesses in the popular <strong>TR-069<\/strong> (remote management) and related <strong>TR-064<\/strong> (LAN-Side <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">DSL<\/a> CPE Configuration) protocols, which are commonly enabled in broadband routers supplied by ISPs and help the provider to keep your device updated with the latest firmware or to perform various other tasks (e.g. diagnostics).<\/p>\n<p>Many routers that use TR-069 and TR-064 tend to leave Internet <strong>port 7547<\/strong> open to outside connections (ports like 5555 may also be targeted) and the modified version of Mirai has found to way to exploit this, which appears to be based off a recently discovered proof of concept exploit (<a href=\"https:\/\/devicereversing.wordpress.com\/2016\/11\/07\/eirs-d1000-modem-is-wide-open-to-being-hacked\/\" target=\"_blank\">here<\/a> and <a href=\"https:\/\/www.exploit-db.com\/exploits\/40740\/\" target=\"_blank\">here<\/a>).<\/p>\n<p>In short, the attack can instruct TR-064 on vulnerable routers to open <strong>port 80<\/strong> (usually used for HTTP website traffic) on the device&#8217;s firewall, which then allows the hacker access to its web-based admin interface. After that point a command injection can be used to exploit various weaknesses and before you know it the router has been hijacked.<\/p>\n<p>Whoever is behind the attack can now steal your <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/wifi\">WiFi<\/a> details, change the router\u2019s settings (e.g. adjusting the DNS settings to snoop on your Internet traffic or conduct attacks) and basically do all sorts of nasty things with the device or your Internet connection \/ network traffic.<\/p>\n<blockquote class=\"bq1\"><p><a href=\"https:\/\/isc.sans.edu\/forums\/diary\/Port+7547+SOAP+Remote+Code+Execution+Attack+Against+DSL+Modems\/21759\" target=\"_blank\"><strong>SANS Internet Storm Centre Advisory<\/strong><\/a><\/p>\n<p>If you suspect that you have a vulnerable router, then reboot it, and check if port 7547 is listening after you reboot (if infected, the router will no longer listen). If you can, block port 7547 and update your firmware if there is an update available. A reboot will &#8220;clean&#8221; the router until it is infected again.<\/p>\n<p>Somewhat expected, but with the old host name <em>l.ocalhost.host<\/em> being taken down, the bot now uses <em>timeserver.host<\/em> and <em>ntp.timerserver.host<\/em>. Both resolve to 176.74.176.187 for now.<\/p>\n<p>For the last couple days, attacks against port 7547 have increased substantially. These scans appear to exploit a vulnerability in popular <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/link\/adsl\">DSL<\/a> routers. This issue may already have caused severe issues for German ISP Deutsche Telekom and may affect others as well (given that the US is just &#8220;waking up&#8221; from a long weekend). For Deutsche Telekom, Speedport routers appeared to be the main issue.<\/p>\n<p>According to <a href=\"https:\/\/www.shodan.io\/search?query=port%3A7547\" target=\"_blank\">Shodan<\/a>, about 41 Million devices have port 7547 open [ISPr Ed: Only some of those will be vulnerable to this]. The code appears to be derived from Mirai with the additional scan for the SOAP vulnerability. Currently, honeypots see about one request every 5-10 minutes for each target IP.<\/p><\/blockquote>\n<p>What&#8217;s striking about this is just how many routers, often from different manufacturers, appear to be vulnerable. The attack started by hitting Eir in Ireland and then Deutsche Telekom&#8217;s Speedport W 921V and Speedport W 723V Type B (T-Com\/T-home) in Germany, but it can also infect ZyXEL&#8217;s D-1000 and P-660HN-T1A, various D-Link routers and others from MitraStar, Digicom, Aztech and possibly more.<\/p>\n<p>Security researchers suggest that <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/tt\" rel=\"nofollow\" target=\"_blank\">TalkTalk<\/a>&#8217;s D-Link DSL-3780 based kit may also be vulnerable, although as yet it remains unclear quite how many makes and models of router are exposed to the exploit. The Mirai code will no doubt continue to be tweaked and so even those that aren&#8217;t vulnerable today might still be exploited tomorrow.<\/p>\n<p>So far none of <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/britishtelecom\" rel=\"nofollow\" target=\"_blank\">BT<\/a>, <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/bskyb\" rel=\"nofollow\" target=\"_blank\">Sky Broadband<\/a> or <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/vm\" rel=\"nofollow\" target=\"_blank\">Virgin Media<\/a>&#8217;s kit has been affected, although ISPs would be wise to pay attention to this threat and liaise with their partners in order to ensure that the firmware on their customer router(s) is not at risk. We did ask <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/tt\" rel=\"nofollow\" target=\"_blank\">TalkTalk<\/a> and so far the ISP has not been able to confirm whether their kit is at risk, but they are checking.<\/p>\n<p><strong>UPDATE 30th November 2016<\/strong><\/p>\n<p>Some readers have pointed out that the ZyXEL AMG1302 router offered by the Post Office appears to be affected.<\/p>\n<p><strong>UPDATE 30th Nov 5:03pm<\/strong><\/p>\n<p>The Post Office has responded.<\/p>\n<blockquote class=\"bq1\"><p><strong>A Post Office Spokesperson told ISPreview.co.uk:<\/strong><\/p>\n<p>&#8220;Post Office can confirm that on 28\/11 a third party attempted to disrupt the services of its broadband customers. Although this did result in some intermittent service problems we would like to reassure customers that no personal data has been compromised.<\/p>\n<p>We would like to apologise to any customers who have been experiencing issues with their Post Office broadband service.<\/p>\n<p>We constantly review our systems and processes to protect our customers against incidents of this nature.<\/p>\n<p>No other Post Office services were affected.&#8221;<\/p><\/blockquote>\n<p><strong>UPDATE 1st Dec 2016<\/strong><\/p>\n<p>Now customers of <a href=\"https:\/\/www.ispreview.co.uk\/index.php\/go\/kcom\" rel=\"nofollow\" target=\"_blank\">KCOM<\/a> have been hit (<a href=\"http:\/\/www.ispreview.co.uk\/index.php\/2016\/12\/kcoms-broadband-routers-latest-infected-mirai-worm.html\">here<\/a>).<\/p>\n<p><strong>UPDATE 2nd Dec 2016<\/strong><\/p>\n<p>Sadly TalkTalk forgot to give us an update 3-4 days ago when everybody else got it, but here&#8217;s what one of their spokespeople finally told us: &#8220;<em>Along with other ISPs in the UK and abroad, we are taking steps to review the potential impacts of the Mirai worm. A small number of customer routers have been affected, and we have deployed additional network-level controls to further protect our customers<\/em>.&#8221; By &#8220;<em>small<\/em>&#8221; they still mean many.. many thousands.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband routers at other European ISPs (900,000+ in Germany), may soon begin to hit devices in the United Kingdom too, such as TalkTalk&#8217;s D-Link DSL-3780 kit.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[1],"tags":[479,74],"class_list":["post-13006","post","type-post","status-publish","format-standard","hentry","category-uk_isp_news","tag-security","tag-talktalk"],"share_on_mastodon":{"url":"","error":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm - ISPreview UK<\/title>\n<meta name=\"description\" content=\"It&#039;s spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm - ISPreview UK\" \/>\n<meta property=\"og:description\" content=\"It&#039;s spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\" \/>\n<meta property=\"og:site_name\" content=\"ISPreview UK\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ispreview\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/ispreview\" \/>\n<meta property=\"article:published_time\" content=\"2016-11-29T09:24:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-12-02T08:49:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Mark Jackson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ispreview\" \/>\n<meta name=\"twitter:site\" content=\"@ispreview\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Jackson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\"},\"author\":{\"name\":\"Mark Jackson\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/person\\\/de66a8b4e937c21c80e443d1bf9c35d5\"},\"headline\":\"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm\",\"datePublished\":\"2016-11-29T09:24:32+00:00\",\"dateModified\":\"2016-12-02T08:49:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\"},\"wordCount\":940,\"commentCount\":17,\"publisher\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#organization\"},\"keywords\":[\"Security\",\"TalkTalk\"],\"articleSection\":[\"ISP News\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\",\"name\":\"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm - ISPreview UK\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#website\"},\"datePublished\":\"2016-11-29T09:24:32+00:00\",\"dateModified\":\"2016-12-02T08:49:07+00:00\",\"description\":\"It's spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/2016\\\/11\\\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ispreview.co.uk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#website\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/\",\"name\":\"ISPreview UK\",\"description\":\"Top Broadband ISP and Mobile Provider Information Site\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ispreview.co.uk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#organization\",\"name\":\"ISPreview.co.uk\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ispreview_uk_logo.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2020\\\/07\\\/ispreview_uk_logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"ISPreview.co.uk\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/ispreview\",\"https:\\\/\\\/x.com\\\/ispreview\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/mjack\\\/\",\"https:\\\/\\\/bsky.app\\\/profile\\\/ispreview.bsky.social\",\"https:\\\/\\\/mastodon.social\\\/@ispreview\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/#\\\/schema\\\/person\\\/de66a8b4e937c21c80e443d1bf9c35d5\",\"name\":\"Mark Jackson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/nggallery_import\\\/Mark-Jackson-96x96.jpg\",\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/nggallery_import\\\/Mark-Jackson-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ispreview.co.uk\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/nggallery_import\\\/Mark-Jackson-96x96.jpg\",\"caption\":\"Mark Jackson\"},\"description\":\"By Mark Jackson Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook, BlueSky, Threads.net and Linkedin.\",\"sameAs\":[\"http:\\\/\\\/www.ispreview.co.uk\",\"https:\\\/\\\/www.facebook.com\\\/ispreview\",\"https:\\\/\\\/x.com\\\/ispreview\"],\"url\":\"https:\\\/\\\/www.ispreview.co.uk\\\/index.php\\\/author\\\/markj\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm - ISPreview UK","description":"It's spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html","og_locale":"en_GB","og_type":"article","og_title":"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm - ISPreview UK","og_description":"It's spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband","og_url":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html","og_site_name":"ISPreview UK","article_publisher":"https:\/\/www.facebook.com\/ispreview","article_author":"https:\/\/www.facebook.com\/ispreview","article_published_time":"2016-11-29T09:24:32+00:00","article_modified_time":"2016-12-02T08:49:07+00:00","og_image":[{"width":1000,"height":1000,"url":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg","type":"image\/jpeg"}],"author":"Mark Jackson","twitter_card":"summary_large_image","twitter_creator":"@ispreview","twitter_site":"@ispreview","twitter_misc":{"Written by":"Mark Jackson","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#article","isPartOf":{"@id":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html"},"author":{"name":"Mark Jackson","@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/person\/de66a8b4e937c21c80e443d1bf9c35d5"},"headline":"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm","datePublished":"2016-11-29T09:24:32+00:00","dateModified":"2016-12-02T08:49:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html"},"wordCount":940,"commentCount":17,"publisher":{"@id":"https:\/\/www.ispreview.co.uk\/#organization"},"keywords":["Security","TalkTalk"],"articleSection":["ISP News"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html","url":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html","name":"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm - ISPreview UK","isPartOf":{"@id":"https:\/\/www.ispreview.co.uk\/#website"},"datePublished":"2016-11-29T09:24:32+00:00","dateModified":"2016-12-02T08:49:07+00:00","description":"It's spreading fast! A newly modified version of the malicious Mirai worm, which has recently been remotely infecting masses of different broadband","breadcrumb":{"@id":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.ispreview.co.uk\/index.php\/2016\/11\/talktalk-isp-routers-potentially-vulnerable-new-mirai-worm.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ispreview.co.uk\/"},{"@type":"ListItem","position":2,"name":"UPDATE3 TalkTalk and Other ISP Routers Potentially Vulnerable to New Mirai Worm"}]},{"@type":"WebSite","@id":"https:\/\/www.ispreview.co.uk\/#website","url":"https:\/\/www.ispreview.co.uk\/","name":"ISPreview UK","description":"Top Broadband ISP and Mobile Provider Information Site","publisher":{"@id":"https:\/\/www.ispreview.co.uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ispreview.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.ispreview.co.uk\/#organization","name":"ISPreview.co.uk","url":"https:\/\/www.ispreview.co.uk\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/logo\/image\/","url":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg","contentUrl":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2020\/07\/ispreview_uk_logo.jpg","width":1000,"height":1000,"caption":"ISPreview.co.uk"},"image":{"@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ispreview","https:\/\/x.com\/ispreview","https:\/\/www.linkedin.com\/in\/mjack\/","https:\/\/bsky.app\/profile\/ispreview.bsky.social","https:\/\/mastodon.social\/@ispreview"]},{"@type":"Person","@id":"https:\/\/www.ispreview.co.uk\/#\/schema\/person\/de66a8b4e937c21c80e443d1bf9c35d5","name":"Mark Jackson","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2023\/01\/nggallery_import\/Mark-Jackson-96x96.jpg","url":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2023\/01\/nggallery_import\/Mark-Jackson-96x96.jpg","contentUrl":"https:\/\/www.ispreview.co.uk\/wp-content\/uploads\/2023\/01\/nggallery_import\/Mark-Jackson-96x96.jpg","caption":"Mark Jackson"},"description":"By Mark Jackson Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook, BlueSky, Threads.net and Linkedin.","sameAs":["http:\/\/www.ispreview.co.uk","https:\/\/www.facebook.com\/ispreview","https:\/\/x.com\/ispreview"],"url":"https:\/\/www.ispreview.co.uk\/index.php\/author\/markj"}]}},"_links":{"self":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/13006","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/comments?post=13006"}],"version-history":[{"count":0,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/posts\/13006\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/media?parent=13006"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/categories?post=13006"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ispreview.co.uk\/index.php\/wp-json\/wp\/v2\/tags?post=13006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}