New DDoS botnet goes after Hadoop enterprise servers

guest · Oct 25, 2018

New DDoS botnet goes after Hadoop enterprise servers
October 25, 2018
https://www.zdnet.com/article/new-ddos-botnet-goes-after-hadoop-enterprise-servers/

While initially, the botnet consisted of a few command and control servers, in a threat alert sent out today by cyber-security firm Radware, the company says the botnet has now grown to number over 70 servers.

The role of these servers is to scan the internet for Hadoop installations that use a misconfigured YARN module.

Once the botnet finds a possible victim, the botnet, which Radware named DemonBot, attempts to take advantage of a YARN misconfiguration to install a "bot" process on the vulnerable Hadoop system.
Click to expand...

A link to Radware's threat alert that contains technical details and IOCs will be added later in the day, after the alert becomes public. Thank you for understanding!
Click to expand...

Log in or Sign up

New DDoS botnet goes after Hadoop enterprise servers

guest Guest

Log in or Sign up

New DDoS botnet goes after Hadoop enterprise servers

guest Guest

Useful Searches