Palo Alto Networks researchers uncovered a series of ongoing attacks to spread a variant of the infamous Mirai bot exploiting multiple vulnerabilities. The attacks were first observed on February 16, experts noticed that upon successful exploitation, the malicious code uses the wget utility to download a shell script from the C2. The shell script downloads several Mirai binaries that were compiled for different architectures, then it executes these binaries one by one. The malware also downloads more shell scripts that retrieve brute-forcers that could be used to target devices protected with weak passwords.”]
Source: https://securityaffairs.co/wordpress/115664/uncategorized/mirai-botnet-variant-2.html