New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption

The article discusses the emergence of a new Mirai-based botnet named ShadowV2, which targeted vulnerable IoT devices during the AWS outage in late October 2025. Researchers from FortiGuard Labs observed that ShadowV2 exploited various IoT vulnerabilities across multiple countries and industries, indicating a test run for future attacks. The botnet primarily targets devices from manufacturers like DDWRT, D-Link, DigiEver, TBK, and TP-Link.

Victims were reported in sectors such as technology, retail, manufacturing, and education. ShadowV2 utilizes multiple attack methods, including UDP and TCP floods, and highlights the ongoing security risks associated with IoT devices. The report emphasizes the need for timely firmware updates and robust security practices to mitigate these threats.