Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Targets Over 6,000 Devices

The attack sequence entails the use of a malware dropper, a shell script ("dropbpb.sh") that's designed to fetch and execute the main binary on the target system for various system architectures such as mips, mipsel, armv5l, armv7l, and x86_64.