chg: [botnets] Adds KmsdBot

Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
This commit is contained in:
Jürgen Löhel 2022-11-15 18:10:39 -06:00
parent 5b9b41b3e0
commit f595195cd2
No known key found for this signature in database
GPG key ID: 54E44C4D345DD098

View file

@ -1383,7 +1383,17 @@
], ],
"uuid": "505c6a54-a701-4a4b-85d4-0f2038b7b46a", "uuid": "505c6a54-a701-4a4b-85d4-0f2038b7b46a",
"value": "Dark.IoT" "value": "Dark.IoT"
},
{
"description": "Akamai Security Research has observed a new golang malware which they named KmsdBot. The malware scans for open SSH ports and performs a simple dictionary attack against it. The researchers from Akamai monitored only DDoS activity, but discovered also the functionality to launch cryptomining. The malware has varied targets including the gaming industry, technology industry, and luxury car manufacturers.",
"meta": {
"refs": [
"https://www.akamai.com/blog/security-research/kmdsbot-the-attack-and-mine-malware"
]
},
"uuid": "b6919400-9b16-48ae-8379-fab26a506e32",
"value": "KmsdBot"
} }
], ],
"version": 28 "version": 29
} }