Eleven11bot: The DDoS Menace Invading 86,000 IoT Devices!
Eleven11bot has infected over 86,000 IoT devices, mostly security cameras and NVRs, for DDoS attacks. Loosely linked to Iran, it’s one of the largest botnets since 2022. Nokia’s Jérôme Meyer notes its rapid growth and exceptional size among non-state actors. Experts advise securing devices against weak credentials to combat Eleven11bot.

Hot Take:
Who would’ve thought that in 2023, the ultimate villain would be a botnet named Eleven11bot, known for bullying security cameras and NVRs into a life of cybercrime? While it sounds like a villainous character from a rejected sci-fi script, it seems Eleven11bot is more into terrorizing telecommunication services and gaming servers than world domination. Looks like your IoT devices just got a new hobby: participating in DDoS attacks!
Key Points:
- Eleven11bot has infected over 86,000 IoT devices, focusing on security cameras and NVRs for DDoS attacks.
- The botnet is linked to Iran and has targeted telecom services and gaming servers.
- Discovered by Nokia researchers, it’s deemed one of the largest DDoS botnets in recent years.
- GreyNoise reports the botnet spreads via weak admin credentials and exposed ports.
- Defenders should update IoT firmware, change default credentials, and monitor for suspicious activities.