The data pipe involves compromised Shenzhen webcams and DVRs.
An estimated 30,000 webcams and video recorders make up the massive botnet.
He remains confident in his team’s estimate as repeated attacks originate from the same 20,000-30,000 observed IP addresses.
Greynoise researchers believe Eleven11bot is a new variant of Mirai, the infamous malware that first surfaced in 2016.
Mirai-based botnets typically infect Internet of Things (IoT) devices by exploiting default credentials or software vulnerabilities.
Regular firmware updates are also critical in patching vulnerabilities that botnets like Eleven11bot could exploit.
