Security experts have discovered a new hacking tool dubbed NEW IPCAM EXPLOIT containing a backdoor that is offered on several underground hacking forums. The hacking tool is a free PHP script that allows users to scan the Internet for vulnerable IP Cameras running a vulnerable version of GoAhead embedded web-server. At the bottom of the script, there is a backdoor which uses shellscript to connect to contact a malicious server, download a second-stage script, and execute it. The script establishes a secret backdoor by creating the user account ( username: VM | password: Meme123 ) on the wannabe cybercriminals system.”]
Source: https://securityaffairs.co/wordpress/65342/hacking/new-ipcam-exploit-scam.html