Security researchers are raising the alarm in regards to a new botnet named Satori that has been seen active on over 280,000 different IPs in the past 12 hours. Satori — the Japanese word for "awakening"— is not new, but a variant of the more infamous Mira i IoT DDoS malware. Li Fengpei, a security researcher with Qihoo 360 Netlab, says the Satori variant came to life out of the blue today and started scans on ports 37215 and 52869. Satori variant differs from previous Mirai versions According to a report, Li shared with Bleeping Computer today, the Mirai Satori variant is quite different from all previous pure Mirai variants. Previous Mirai versions infected IoT devices and then downloaded a Telnet scanner component that attempted to find other victims and infect them with the Mirai bot. The Satori variant does not use a scanner but uses two embedded exploits that will try to connect to remote devices on ports 37215 and 52869. Effectively, this makes Satori an IoT worm, bein