mirror of https://github.com/MISP/misp-galaxy
chg: [botnets] Adds KmsdBot
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>pull/797/head
parent
5b9b41b3e0
commit
f595195cd2
|
@ -1383,7 +1383,17 @@
|
||||||
],
|
],
|
||||||
"uuid": "505c6a54-a701-4a4b-85d4-0f2038b7b46a",
|
"uuid": "505c6a54-a701-4a4b-85d4-0f2038b7b46a",
|
||||||
"value": "Dark.IoT"
|
"value": "Dark.IoT"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"description": "Akamai Security Research has observed a new golang malware which they named KmsdBot. The malware scans for open SSH ports and performs a simple dictionary attack against it. The researchers from Akamai monitored only DDoS activity, but discovered also the functionality to launch cryptomining. The malware has varied targets including the gaming industry, technology industry, and luxury car manufacturers.",
|
||||||
|
"meta": {
|
||||||
|
"refs": [
|
||||||
|
"https://www.akamai.com/blog/security-research/kmdsbot-the-attack-and-mine-malware"
|
||||||
|
]
|
||||||
|
},
|
||||||
|
"uuid": "b6919400-9b16-48ae-8379-fab26a506e32",
|
||||||
|
"value": "KmsdBot"
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"version": 28
|
"version": 29
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue