InfectedSlurs

InfectedSlurs is a threat actor associated with Mirai botnet expansion campaigns targeting internet-exposed devices through exploitation of known vulnerabilities. The group has been linked to activity in which compromised GeoVision IoT devices were used to download and execute an ARM-based Mirai variant known as LZRD. Reported exploitation also involved additional vulnerabilities affecting other exposed systems, consistent with opportunistic botnet propagation and mass compromise of poorly secured or end-of-life devices. Based on the available reporting, InfectedSlurs is best characterized as an intrusion set focused on initial access through vulnerability exploitation and post-compromise malware deployment in support of botnet operations. High-confidence public information about its origin, broader victimology, organizational structure, or state affiliation is currently not available.