This article was originally published on ThreatChain — decentralized threat intelligence.

Your home router might be attacking websites right now and you'd never know. Millions are already compromised.

A new Mirai sample was identified by threat intelligence feeds on 2026-05-05 17:45:50. This post breaks down what we know about the specific sample, how to recognize related activity on your network, and what to do if you or your organization might be affected.

The Sample at a Glance

Field Value

SHA-256 1a8d5043cc77d05834d1b64b4a86d8db66ba5a79a23c6778d8f6b1c8b8de46f1

File name luxzz.mpsl

File type elf

Size 50.2 KB

Origin (first observed) DE

First seen 2026-05-05 17:45:50

Family Mirai

Tags elf, Mirai, upx

VirusTotal detection 30/74 engines flagged malicious

What Mirai Does

Mirai is a family of IoT botnets that spread by brute-forcing default credentials on routers, cameras, and other embedded devices.…