Skip to content
MalwareWiki

Malware

Ballista

Ballista is an IoT botnet, infecting unpatched TP-Link Archer AX21 (AX1800) routers.

Ballista is a Linux malware family.

Background

Ballista is an IoT botnet that compromises unpatched TP-Link Archer AX21 (AX1800) routers. It propagates by automatically exploiting CVE-2023-1389, and its feature set covers remote code execution as well as DDoS attacks.

Source: Malpedia (Fraunhofer FKIE).