FICORA and CAPSAICIN Botnets Target Unpatched D-Link Devices

Recent botnet activity, particularly from FICORA (a Mirai variant) and CAPSAICIN (a Kaiten variant), targets vulnerabilities in D-Link routers via the Home Network Administration Protocol (HNAP). These botnets exploit known vulnerabilities to execute remote commands and conduct DDoS attacks. FICORA uses brute-force methods with hard-coded credentials, while CAPSAICIN focuses on East Asian countries and can eliminate competing malware. Regular firmware updates and network monitoring are crucial for mitigating these threats.