Mirai campaign exploits D-Link routers to fuel new botnet surge

Mirai campaign exploits D-Link routers

The latest wave of Mirai‑style malware is leveraging CVE‑2025‑29635, a remote‑code execution flaw in the aging D‑Link DIR‑823X, to conscript home gateways into a sprawling botnet. Security researchers from Reuters reported that infection rates have jumped ↑ 12,000 devices in the past week, outpacing earlier variants. Device owners who ignore firmware updates now face forced participation in DDoS attacks that could cripple critical infrastructure, including nuclear control systems. A senior analyst at Bloomberg warned that the botnet’s command‑and‑control servers are already targeting cloud‑edge nodes.

“The speed at which this exploit spreads is unprecedented,” said the researcher.

Users are urged to replace default credentials, disable remote management, and apply the latest patches before the threat vector expands further.