securityonline.info
Tengu Botnet Is a Modernized Mirai Variant That Fights to Stay on IoT Devices
At a glance Malware family Tengu (Mirai-derived IoT botnet) Threat actor Unattributed; no operator named Target Internet-facing embedded Linux devices, such as routers, cameras, and DVRs Delivery vector Telnet brute force, then a shell-script dropper over HTTP Key capabilities 25 DDoS methods, SOCKS5 proxy, recon, payload updates, persistence, self-defense Source Nozomi Networks Labs TL;DR Nozomi Networks Labs disclosed a new IoT botnet named Tengu on July 27, 2026.