/
has_exploit:true × latest_source_host:feeds.fortinet.com × limpar

Resultados

2 casos · pág. 1/1

Evooo1Bot: Mirai-based Linux botnet with encrypted C2, 28-command admin interface and reverse SOCKS relay

FortiGuard Labs describes Evooo1Bot, a Linux botnet that embeds the Mirai DDoS engine in a more modular and capable framework. It uses encrypted C2 communications, layered string obfuscation (AES-256-CTR, ChaCha20, XOR-based key derivation) and a 28-command remote administration interface. It also ships an integrated exploit arsenal again…

ClingSTUN Linux backdoor turns exploited IoT devices into proxy nodes via public STUN servers

FortiGuard Labs describes ClingSTUN, a Linux back-connect proxy backdoor that keeps persistent access and turns compromised devices into remotely controlled proxy nodes. It combines persistence, process termination, watchdog manipulation and remote command execution. It also uses legitimate public STUN servers for NAT traversal, to discov…