Owari
- First seen
- 2018-07-01 00:00:00
- Malware type
- botnet, ddos
- Last IoC activity
- 2026-07-22 01:27:18
- Profile updated
- 2026-07-07 14:28:17
Targeted industries: technology-and-telecommunications
Context
Mirai variant by actor "Anarchy" that used CVE-2017-17215 in July 2018 to compromise 18,000+ devices.
Exploited vulnerabilities
- CVE-2017-17215 (vulnerability)
Related threat objects
- Owari (infrastructure)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Elf.Owari (report)
- blog.newskysecurity.com — Understanding The Iot Hacker A Conversation With Owari Sora Iot Botnet Author 117Feff56863 (report)
- twitter.com — 1019759516789821441 (report)
- fortinet.com — A Wicked Family Of Bots (report)
- twitter.com — 1019647993547550720 (report)
- scmagazine.com — 782395 (report)
- twitter.com — 1019922651203227653 (report)
- bleepingcomputer.com — Router Crapfest Malware Author Builds 18 000 Strong Botnet In A Day (report)