iot_botnets.md

@@ -16,7 +16,7 @@ Brian Russell
 | JenX | 2018 | Derived from Satori; offers DDoS-for-a-fee; targets Grand Theft Auto; uses server-based scanning and exploitation instead of peer-to-peer | HIGH | https://threatpost.com/jenx-botnet-has-grand-theft-auto-hook/129759/| 
 | ADB.Miner | 2018 | tbp | HIGH | https://www.zdnet.com/article/adb-miner-worm-is-rapidly-spreading-across-android-devices/ | 
 | DarkSky | 2018 | The malware is capable of performing DDoS attacks using several vectors: DNS Amplification, TCP (SYN) Flood, UDP Flood, HTTP Flood. | HIGH | https://blog.radware.com/security/2018/02/darksky-botnet/ | 
-| Reaper / IoTroop | 2017 | tbp | HIGH | https://www.wired.com/story/reaper-iot-botnet-infected-million-networks/ | 
+| Reaper / IoTroop | 2017 | Based on Mirai code, but attempts to exploit software vulnerabilities instead of password guessing; has infected routers, surveillance cameras, etc | HIGH | https://www.wired.com/story/reaper-iot-botnet-infected-million-networks/ | 
 | Brickerbot | 2017 | Destroys insecure IoT devices to keep them from taking part in DDoS botnets | HIGH | https://ics-cert.us-cert.gov/alerts/ICS-ALERT-17-102-01A | 
 | Satori | Based on Miria; Initially targeted Huawei routers | 2017 | HIGH | https://www.darkreading.com/vulnerabilities---threats/satori-botnet-malware-now-can-infect-even-more-iot-devices/d/d-id/1330875 |
 | Mirai  | 2016 | Well-known botnet targets consumer IoT devices using dictionaries of common usernames/passwords; multiple attack vectors | HIGH   | https://en.wikipedia.org/wiki/Mirai_(malware)   |