MMD-0060-2016 – Linux/UDPfker and ChinaZ threat today
Background ChinaZ is the PRC (Public Rep of China) actor’s made Linux ELF DDoS malware and its service. This threat…
MMD-0059-2016 – Linux/IRCTelnet (new Aidra) – A DDoS botnet aims IoT w/ IPv6 ready
It’s a Kaiten/Tsunami? No.. STD?? No! It’s a GayFgt/Torlus/Qbot? No!! Is it Mirai?? NO!! It’s a Linux/IRCTelnet (new Aidra)! ..a…
MMD-0058-2016 – Linux/NyaDrop – a linux MIPS IoT bad news
Background Since the end of September 2016 I received a new type of attacks that aims the MIPS platform I…
MMD-0057-2016 – Linux/LuaBot – IoT botnet as service
Background On Mon, Aug 29, 2016 at 5:07 PM I received this ELF malware sample from a person (thank you!).…
MMD-0056-2016 – Linux/Mirai, how an old ELF malcode is recycled..
Our recent analysis about Mirai is in here==>[Link] Background From August 4th 2016 several sysadmin friends were helping us by…
MMD-0055-2016 – Linux/PnScan ; ELF worm that still circles around
Background Just checked around internet and found an interesting ELF worm distribution that may help raising awareness for fellow sysadmins.…
MMD-0054-2016 – ATMOS botnet facts you should know
The background This post is about recent intelligence and sharing information of the currently emerged credential stealer and spying botnet…
[Slide|Video] Kelihos & Peter Severa; the “All Out” version
Tag: Kelihos, Khelios, P2P, FastFlux, Botnet, CNC, C2, Clickfraud, Traffic Redirection, Spambot, DNS Poison, Botnet as Service, Affiliate, Severa, Peter…
MMD-0053-2016 – A bit about ELF/STD IRC Bot: x00’s CBack aka xxx.pokemon(.)inc
Latest UPDATE incident of this threat is–>[link] Background I received the report of the host in Google cloud network is…
MMD-0052-2016 – Overview of “SkidDDoS” ELF++ IRC Botnet
Tag: kaiten, ktx, tsunami, STD, stdbot, torlus, Qbot, gayfgt, lizard, lizkebab, antichrist, sinden, sdn, $dn, bossaline, bossabot, dtool, aidra, lightaidra,…