{"id":4209,"date":"2026-09-21T02:55:10","date_gmt":"2026-09-20T21:25:10","guid":{"rendered":"https:\/\/cybx.in\/blog\/?p=4209"},"modified":"2026-09-21T02:55:11","modified_gmt":"2026-09-20T21:25:11","slug":"what-is-mirai","status":"publish","type":"post","link":"https:\/\/cybx.in\/blog\/what-is-mirai\/","title":{"rendered":"What Is Mirai?"},"content":{"rendered":"\n<meta name=\"description\" content=\"Mirai is a type of malware that became widely known for taking over internet-connected devices and using them as part of a botnet. It first appeared in 2016 \">\n<meta property=\"og:title\" content=\"What Is Mirai?\">\n<meta property=\"og:description\" content=\"Mirai is a type of malware that became widely known for taking over internet-connected devices and using them as part of a botnet. It first appeared in 2016 \">\n<meta name=\"twitter:card\" content=\"summary_large_image\">\n<meta name=\"twitter:title\" content=\"What Is Mirai?\">\n<meta name=\"twitter:description\" content=\"Mirai is a type of malware that became widely known for taking over internet-connected devices and using them as part of a botnet. It first appeared in 2016 \">\n\n\n<div role=\"feed\" data-perf-region=\"transcript\" aria-label=\"Chat messages\" aria-describedby=\"_r_5g_\" data-find-provider-scope=\"\">\n<div data-sizer-excess=\"0\" data-rocksteady-sizer=\"\" data-testid=\"transcript-sizer\">\n<div data-rs-index=\"85\" data-index=\"85\" data-testid=\"transcript-row\" data-last-message=\"true\" data-perf-row=\"assistant\" data-perf-row-from-tail=\"0\" data-perf-row-streaming=\"false\">\n<div class=\"rounded-lg focus-visible:shadow-focus focus-visible:outline-hidden\" tabindex=\"0\" role=\"article\" aria-setsize=\"86\" aria-posinset=\"86\" aria-label=\"Message 86 of 86\">\n<div data-test-render-count=\"1\">\n<div class=\"group group\/message-row\">\n<div class=\"group relative relative pb-[var(--msg-assistant-pb,0.75rem)]\" data-testid=\"assistant-message\" data-is-streaming=\"false\">\n<div class=\"font-claude-response relative leading-[1.65rem] [&amp;_pre&gt;div]:bg-bg-000\/50 [&amp;_pre&gt;div]:border-0.5 [&amp;_pre&gt;div]:border-border-400 [&amp;_.ignore-pre-bg&gt;div]:bg-transparent [&amp;_.standard-markdown_:is(p,blockquote,h1,h2,h3,h4,h5,h6)]:pl-[var(--msg-text-inset,0.5rem)] [&amp;_.standard-markdown_:is(p,blockquote,ul,ol,h1,h2,h3,h4,h5,h6)]:pr-8 [&amp;_.progressive-markdown_:is(p,blockquote,h1,h2,h3,h4,h5,h6)]:pl-[var(--msg-text-inset,0.5rem)] [&amp;_.progressive-markdown_:is(p,blockquote,ul,ol,h1,h2,h3,h4,h5,h6)]:pr-8 [&amp;_.md-table-scroll]:pl-[var(--msg-block-inset,0.5rem)] [&amp;_.md-table-scroll]:pr-[var(--msg-inset-end,0.5rem)]\">\n<div class=\"\">\n<div class=\"prose\" data-cds=\"Prose\">\n<div class=\"_blocks_4za3l_47 standard-markdown grid-cols-1 grid [&amp;_&gt;_*]:min-w-0 whitespace-normal break-words print:block standard-markdown\" data-perf-reply-text=\"\">\n<p dir=\"ltr\">So Mirai&#8217;s this malware that got pretty famous for basically taking over a bunch of internet devices and turning them into what people call a botnet. Showed up in 2016, went hard after stuff like home routers and security cameras, the kind of device nobody really thinks about protecting.<\/p>\n<p dir=\"ltr\">Gets into something that&#8217;s not locked down properly, and from there it just does whatever some remote attacker tells it to do. Owner usually has zero idea. That&#8217;s the botnet part really, a pile of hijacked devices all working together and nobody notices.<\/p>\n<h3 dir=\"ltr\">How&#8217;s It Actually Get In<\/h3>\n<p dir=\"ltr\">Pretty simple honestly. It just scans for devices sitting online with weak passwords, or the default one that came printed on the box. Finds one, gets in, infects it. Not much more to it than that.<\/p>\n<p dir=\"ltr\">One hacked camera isn&#8217;t a huge deal by itself. Thousands of them though, all controlled together, that&#8217;s a serious amount of traffic pointed wherever the attacker wants it pointed.<\/p>\n<h3 dir=\"ltr\">Why People Still Talk About It<\/h3>\n<p dir=\"ltr\">This is basically what happened with Dyn back in 2016, the DNS company. Got hit hard, and a bunch of big name websites went down because of it. That&#8217;s really the reason Mirai&#8217;s a name that stuck around.<\/p>\n<p dir=\"ltr\">Uncomfortable part is, everyone just assumed their router or camera was too boring to be worth attacking. Turns out that&#8217;s exactly why it got attacked.<\/p>\n<h3 dir=\"ltr\">Is It Still Around<\/h3>\n<p dir=\"ltr\">Code leaked not long after everything happened, and it&#8217;s been copied and tweaked by other malware ever since. So even though the original thing isn&#8217;t really active the same way anymore, the approach it used definitely stuck around.<\/p>\n<h3 dir=\"ltr\">What Actually Helps<\/h3>\n<p dir=\"ltr\">Nothing complicated really. Change the default password the day you set anything up. Keep it updated. Turn off remote access if you&#8217;re not using it. Boring stuff, but it&#8217;s the stuff that actually works.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>So Mirai&#8217;s this malware that got pretty famous for basically taking over a bunch of internet devices and turning them&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-4209","post","type-post","status-publish","format-standard","hentry","category-learn"],"_links":{"self":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts\/4209","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/comments?post=4209"}],"version-history":[{"count":1,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts\/4209\/revisions"}],"predecessor-version":[{"id":4226,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/posts\/4209\/revisions\/4226"}],"wp:attachment":[{"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/media?parent=4209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/categories?post=4209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybx.in\/blog\/wp-json\/wp\/v2\/tags?post=4209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}