Samba Trojan becomes the bread and butter of fresh attack campaign

guest · Nov 30, 2018

Samba Trojan becomes the bread and butter of fresh attack campaign
November 30, 2018
https://www.zdnet.com/article/samba-trojan-becomes-the-bread-and-butter-of-fresh-attack-campaign/

The Butter attack campaign has been bolstered through the deployment of the Samba Trojan, a recent change to the stealthy criminal operation.
In a blog post on Thursday, the team said that "Butter originates from a very limited number of attack sources and keeps them [the campaign] alive without being caught due to its low and slow operation."

The attack begins with a brute-force SSH attack on Linux machines.
The payload has undergone a number of transitions over time. The most common payloads are the older 80 malware and the new Samba, the former of which is an x64 variant of the well known XOR.DDOS with the filename 80.

The latest variant of the campaign, once inside a vulnerable machine, will run a set of system commands in order to create the user "Butter" and install the backdoor. File permissions are changed to permit file execution, including the deployment of Samba.
Click to expand...

Log in or Sign up

Samba Trojan becomes the bread and butter of fresh attack campaign

guest Guest

Log in or Sign up

Samba Trojan becomes the bread and butter of fresh attack campaign

guest Guest

Useful Searches