Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
4 IOCs

ShadowV2: Advanced Technical Threat Analysis of a New Mirai-Based Botnet

Secure Blink
Secure Blink
Published November 30, 2025Original Report

Malware Families

Excerpt

ShadowV2 does not rely on zero-days, persistence, or stealthy implants. It relies on something far more reliable: millions of exposed devices that reboot clean, remain vulnerable, and reinfect themselves on demand. This Threat Research documents how that model has evolved into a highly efficient, self-sustaining attack ecosystem. ShadowV2 is not a minor fork or incremental variant. It is a heavily weaponized botnet platform that combines modern obfuscation, multi-layered…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREunknownCAPABILITYMiraiVICTIMunknown
Adversary
Infrastructure
Capability(1)
Victim

Indicators of Compromise

Open the mindmap →

4 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2020-25506MediumScore 51/100First seen
CVECVE-2022-37055MediumScore 51/100First seen
CVECVE-2024-3721MediumScore 53/100First seen
CVECVE-2017-17215HighScore 62/100First seen

IOC Relationship Graph

Building graph…