Back Cybersecuritynews

Zerobot Malware Exploiting Tenda Command Injection Vulnerabilities to Deploy Malware

Cybersecuritynews •Tushar Subhra Dutta • March 3, 2026

A Mirai-based botnet campaign known as Zerobot has resurfaced with renewed force, this time targeting critical flaws in Tenda AC1206 routers and the n8n workflow automation platform. The campaign, now operating on its ninth known iteration — dubbed zerobotv9 — has been actively exploiting recently disclosed command injection vulnerabilities to spread malware across exposed networks […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zerobot Malware Targets Tenda Routers via Command Injection Vulnerabilities The Zerobot malware campaign, now in its ninth iteration, is exploiting command injection vulnerabilities in Tenda AC1206 routers and the n8n workflow automation platform. This resurgence of the Mirai-based botnet is actively deploying malware across exposed networks, affecting users of these devices. 2 sources 52

Extracted Entities

Zerobot Malware Exploiting Tenda Command Injection Vulnerabilities to Deploy Malware

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Malware (2)

MITRE ATT&CK (1)

Platforms (2)