The threat actors behind ShellBot are leveraging IP addresses transformed into its hexadecimal notation to infiltrate poorly managed Linux SSH servers and deploy the DDoS malware.
“The overall flow remains the same, but the download URL used by the threat actor to install ShellBot has changed from a regular IP address to a hexadecimal value,” the AhnLab Security Emergency response Center (ASEC)
Related Post
- November 15, 2024
Researchers Warn of Privilege Escalation Risks in Google’s
Cybersecurity researchers have disclosed two security flaws in Google’s Vertex machine learning (ML) platform that, if successfully exploited, could allow
- November 15, 2024
Good Essay on the History of Bad Password
Stuart Schechter makes some good points on the history of bad password policies: Morris and Thompson’s work brought much-needed data
- November 15, 2024
Master Certificate Management: Join This Webinar on Crypto
In the fast-paced digital world, trust is everything—but what happens when that trust is disrupted? Certificate revocations, though rare, can
- November 15, 2024
Vietnamese Hacker Group Deploys New PXA Stealer Targeting
A Vietnamese-speaking threat actor has been linked to an information-stealing campaign targeting government and education entities in Europe and Asia