Neutrino – A botnet has been cannibalizing other hackers' web shells for more than a year

guest · Aug 21, 2019

A botnet has been cannibalizing other hackers' web shells for more than a year
Neutrino botnet is hijacking servers by taking over other hackers' PHP and Java web shells
August 21, 2019
https://www.zdnet.com/article/a-bot...ther-hackers-web-shells-for-more-than-a-year/

A major botnet operation has been attacking and taking over the web shells (backdoors on web servers) of other malware operations for more than a year, security researchers from Positive Technologies revealed today.

Researchers linked the botnet to a former Windows trojan named Neutrino (also known as Kasidet), whose operators appear to have shifted from targeting desktop users to online servers, on which they install a cryptocurrency-mining malware.
NEUTRINO BRUTE-FORCES COMPETITORS' WEB SHELLS
However, security researchers say they've also spotted Neutrino doing odd things, not seen in many other botnets. For example, Neutrino searches for Ethereum nodes that were left running with default passwords, connects to these systems, and steals any locally stored funds.
According to Positive Technologies, Neutrino has been searching the web for 159 different types of PHP web shells and two JSP (Java Server Pages) ones.
Click to expand...

Positive Technologies: Finding Neutrino

Log in or Sign up

Neutrino – A botnet has been cannibalizing other hackers' web shells for more than a year

guest Guest

Log in or Sign up

Neutrino – A botnet has been cannibalizing other hackers' web shells for more than a year

guest Guest

Useful Searches