Bruteforce bot recruitment uses GoBrut malware on content management systems

guest · Apr 15, 2019

Bruteforce bot recruitment uses GoBrut malware on content management systems
April 15, 2019
https://www.scmagazineuk.com/brutef...re-content-management-systems/article/1582064

Security researchers have discovered a new GoBrut botnet variant and C2 server being used to mount attacks on content management systems.

The new GoBrut variant is written in Golang and has also targeted technologies such as SSH and MySQL. Once infected, the host will join the GoBrut botnet and request work from the C2 (Command and Control) server. After work is received the infected host will proceed to bruteforce the targets detailed in the work request sent by the botnet owner.

According to a blog post by researchers at Alert Logic, researchers discovered that this new variant was targeting Unix systems. Previously, the malware had been focusing on Windows systems.

"If the most successful initial entry vector is assumed to be brute force attacks, then website and server owners should apply access control for remote logins across all services to mitigate the threat," said researchers.
Click to expand...

Alert Logic: GoBrut Botnet ELF Variant and New C2 Discovered

Log in or Sign up

Bruteforce bot recruitment uses GoBrut malware on content management systems

guest Guest

Log in or Sign up

Bruteforce bot recruitment uses GoBrut malware on content management systems

guest Guest

Useful Searches