A New Fileless P2P Botnet Malware Targeting SSH Servers Worldwide

guest · Aug 19, 2020

A New Fileless P2P Botnet Malware Targeting SSH Servers Worldwide
August 19, 2020
https://thehackernews.com/2020/08/p2p-botnet-malware.html

Cybersecurity researchers today took the wraps off a sophisticated, multi-functional peer-to-peer (P2P) botnet written in Golang that has been actively targeting SSH servers since January 2020.

Called "FritzFrog," the modular, multi-threaded and file-less botnet has breached more than 500 servers to date, infecting well-known universities in the US and Europe, and a railway company, according to a report released by Guardicore Labs today.

"With its decentralized infrastructure, it distributes control among all its nodes," Guardicore's Ophir Harpaz said. "In this network with no single point-of-failure, peers constantly communicate with each other to keep the network alive, resilient and up-to-date."
Click to expand...

The commands themselves are transmitted to the malware through a series of hoops designed to avoid detection. The attacker node in the botnet first latches onto a specific victim over SSH and then uses the NETCAT utility to establish a connection with a remote server.

What's more, the payload files are exchanged between nodes in BitTorrent-style, employing a segmented file transfer approach to send blobs of data.
Click to expand...

Guardicore: FritzFrog: A New Generation of Peer-to-Peer Botnets

Unlike other P2P botnets, FritzFrog combines a set of properties that makes it unique: it is fileless, as it assembles and executes payloads in-memory. It is more aggressive in its brute-force attempts, yet stays efficient by distributing targets evenly within the network. Finally, FritzFrog’s P2P protocol is proprietary and is not based on any existing implementation.
Click to expand...

Log in or Sign up

A New Fileless P2P Botnet Malware Targeting SSH Servers Worldwide

guest Guest

Log in or Sign up

A New Fileless P2P Botnet Malware Targeting SSH Servers Worldwide

guest Guest

Useful Searches