London-based TalkTalk routers contain a vulnerability now being exploited by at least one Mirai variant. The vulnerability appears to relate to a poor implementation of the TR-064 “LAN-Side DSL CPE [Consumer Premises Equipment] Configuration” protocol in its routers. TalkTalk tells me that it’s begun fixing affected routers. But infected TalkTalk Routers are already being used as IoT launch pads for distributed denial-of-service attacks. An unnamed bitcoin website was hit with a DDoS attack on Dec. 5.”]
Source: https://www.cuinfosecurity.com/blogs/iot-botnet-plague-coming-soon-to-isp-near-you-p-2339