OTX Threat: Inside an IoT Botnet Framework With LLM-Assisted Development

A previously undocumented modular IoT botnet framework has been identified with code partially generated using large language models. The framework consists of C-based bot agents compiled for 17 architectures, a Go-based command-and-control server with DDoS-for-hire panel, and custom exploit capabilities. Bot agents brute-force Telnet access using 1,496 credential pairs and target over 30 IoT devi CVEs: CVE-2014-2321, CVE-2014-8361, CVE-2017-17215, CVE-2018-10561, CVE-2018-10562