A newly discovered Mirai-based botnet, identified as xlabs_v1, is exploiting Android Debug Bridge (ADB) to hijack internet-exposed IoT devices and recruit them for distributed denial-of-service (DDoS) attacks. This botnet targets devices with exposed ADB interfaces, allowing it to gain control and incorporate them into its network. The malware was uncovered by Hunt.io after they stumbled upon an exposed directory on a server hosted in the Netherlands. The xlabs_v1 botnet's ability to exploit ADB vulnerabilities poses a significant threat to device security, as many IoT devices often have ADB enabled by default1. This highlights the importance of securing IoT devices and disabling unnecessary features to prevent such exploits. The emergence of this botnet underscores the need for practitioners to prioritize device security and monitor for potential ADB exploits to prevent their devices from being hijacked for malicious activities.