Tracking Mirai Variant Nexcorium: A Vulnerability-Driven IoT Botnet Campaign

Reported 17 Apr 2026 by otx · Severity: medium

Nexcorium is a multi-architecture Mirai variant exploiting CVE-2024-3721 in TBK DVR devices to build a botnet for distributed denial-of-service attacks. The campaign, attributed to Nexus Team based on custom HTTP headers, uses OS command injection to deliver malware across ARM, M