New Roboto botnet emerges targeting Linux servers running Webmin

guest · Nov 20, 2019

New Roboto botnet emerges targeting Linux servers running Webmin
The botnet's main function is the ability to conduct DDoS attacks, a feature it has not used yet
November 20, 2019
https://www.zdnet.com/article/new-roboto-botnet-emerges-targeting-linux-servers-running-webmin/

A cybercrime group is enslaving Linux servers running vulnerable Webmin apps into a new botnet that security researchers are currently tracking under the name of Roboto.
Because of the security flaw's easy exploitation and the vast number of vulnerable systems, attacks against Webmin installs began days after the vulnerability was disclosed.
THE NEW ROBOTO BOTNET
In a report published today [Chinese, English], the Netlab team at Chinese cyber-security vendor Qihoo 360 said that one of those early attackers was a new botnet they are currently tracking under the name of Roboto.

Currently, the botnet's main feature appears to be a DDoS capability. On the other hand, while the DDoS capability is in the code, Netlab says they've never seen the botnet conduct any DDoS attacks, and the botnet operators seem to be have been primarily focused over the past months on growing the botnet in size.
According to Netlab, the DDoS feature could launch attacks via vectors such as ICMP, HTTP, TCP, and UDP.
Click to expand...

ANOTHER RARE P2P BOTNET
The thing that's unique to Roboto is, however, its internal structure. Bots are organized in a peer-to-peer (P2P) network, and relay commands that they receive from a central command and control (C&C) server commands from one another, rather than each bot connecting to the main C&C.
Click to expand...

Log in or Sign up

New Roboto botnet emerges targeting Linux servers running Webmin

guest Guest

Log in or Sign up

New Roboto botnet emerges targeting Linux servers running Webmin

guest Guest

Useful Searches