https://mac.sploit.dk/tags/mirai/ Recent content in Mirai on Martin's Blog Hugo en-us Mon, 01 Jun 2026 00:00:00 +0000 https://mac.sploit.dk/blog/reversing-the-aisuru-botnet/ Mon, 01 Jun 2026 00:00:00 +0000 https://mac.sploit.dk/blog/reversing-the-aisuru-botnet/ Two ARM32 samples of the Mirai-derived AISURU botnet, taken from stripped binaries to a passive sensor that decrypts the live command channel. Breaking the config cipher, reversing the ChaCha20 C2 protocol, emulating the message MAC under Unicorn, pivoting the IOCs through REDS and Censys, and logging real DDoS orders, without ever running the malware.