FreemindOct 13, 2023

ShellBot, also recognized as PerlBot, is notorious for penetrating servers with feeble SSH credentials through a dictionary attack.

#Cybersecurity #Linux #SSH #Perl #Malware #DDoS #ShellBot

https://cybersec84.wordpress.com/2023/10/13/shellbot-ddos-malware-evasion-how-attackers-use-hex-ips-to-target-linux-ssh-servers/

ShellBot DDoS Malware Evasion: How Attackers Use Hex IPs to Target Linux SSH Servers

The hackers responsible for the ShellBot threat are utilizing a crafty technique involving IP addresses converted into hexadecimal notation to infiltrate poorly managed Linux SSH servers and deploy…

CyberSec84 | Cybersecurity news.
ottotoOct 13, 2023

「 #ShellBot は #16進数IP を使用して #Linux #SSH サーバーへの攻撃の検出を回避します 」： The Hacker News

「ShellBot が関与する観察された最新の攻撃では、URL ベースの検出シグネチャを回避する試みとして、16 進数の IP アドレス (39.99.218[.]78 に相当する hxxp://0x2763da4e/) を使用してマルウェアをインストールすることが判明しました。 。

ダウンロードにcurlを使用し、Webブラウザと同じように16進数をサポートできるため、ShellBotはLinuxシステム環境に正常にダウンロードでき、Perlを介して実行できる」

https://thehackernews.com/2023/10/shellbot-uses-hex-ips-to-evade.html

#prayforsagamihara #TheHackerNews

ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers

Ever heard of an IP address in hexadecimal notation? It's the latest disguise hackers use to deploy DDoS malware on Linux systems.

The Hacker News
Mustafa Kaan DemirhanApr 7, 2023

Heads up, security professionals! Cybercriminals are targeting Cacti and Realtek vulnerabilities with Moobot and ShellBot malware. Keep your systems and data safe by updating to the latest patched versions. #cybersecurity #CactiVulnerability #RealtekVulnerability #Moobot #ShellBot #staysecure

https://cyware.com/news/attacks-ramp-up-against-cacti-and-realtek-vulnerabilities-a07460d9/?web_view=true

Attacks Ramp Up Against Cacti and Realtek Vulnerabilities

Security issues in Realtek and Cacti are being exploited to distribute ShellBot and Moobot malware on exploitable Windows and Linux servers.

Cyware
The Hacker NewsApr 1, 2023

Referenced link: https://thehackernews.com/2023/04/cacti-realtek-and-ibm-aspera-faspex.html
Discuss on https://discu.eu/q/https://thehackernews.com/2023/04/cacti-realtek-and-ibm-aspera-faspex.html

Originally posted by The Hacker News / @TheHackersNews: http://nitter.platypush.tech/TheHackersNews/status/1642168437660352513#m

🚨 High-risk security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by hackers!

Details: https://thehackernews.com/2023/04/cacti-realtek-and-ibm-aspera-faspex.html

Update your systems ASAP to protect against #MooBot and #ShellBot attacks.

#cybersecurity #informationsecurity #hacking

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by hackers! Unpatched systems are at risk.

The Hacker News
The Hacker NewsApr 1, 2023

Referenced link: https://thehackernews.com/2023/04/cacti-realtek-and-ibm-aspera-faspex.html
Discuss on https://discu.eu/q/https://thehackernews.com/2023/04/cacti-realtek-and-ibm-aspera-faspex.html

Originally posted by The Hacker News / @TheHackersNews: http://nitter.platypush.tech/TheHackersNews/status/1642027404997672962#m

🚨 High-risk security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by hackers!

Details: https://thehackernews.com/2023/04/cacti-realtek-and-ibm-aspera-faspex.html

Update your systems ASAP to protect against #MooBot and #ShellBot attacks.

#cybersecurity #informationsecurity #hacking

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by hackers! Unpatched systems are at risk.

The Hacker News
𝕋𝕣𝕚𝕓𝕒𝕝ℂ𝕪𝕓𝕖𝕣𝕊𝕖𝕔𝕦𝕣𝕚𝕥𝕪Mar 25, 2023

[#CyberLand News] Weekly #Threats and #Malware

#threatintel
> #DarkPower #ransowmare
> #RedLine #malware
> #CNMF #cyberoperation
> #BlackGuard #stealer
> #Linux & #ShellBot #malware
> #CommonMagic #malware #cyberwar

https://tribalsec.substack.com/p/cyberland-news-weekly-6-threats-and

[CyberLand News] Weekly #6 - Threats and Malware

Last news on threats, malware and vulnerabilties in the cyber land

TribalSec’s Substack
securityaffairsMar 21, 2023
New #ShellBot #bot targets poorly managed #Linux SSH Servers
https://securityaffairs.com/143807/cyber-crime/shellbot-targets-linux-ssh-servers.html
#securityaffairs #hacking #malware
New ShellBot bot targets poorly managed Linux SSH Servers

New ShellBot DDoS bot malware, aka PerlBot, is targeting poorly managed Linux SSH servers, ASEC researchers warn. AhnLab Security Emergency response Center (ASEC) discovered a new variant of the ShellBot malware that was employed in a campaign that targets poorly managed Linux SSH servers. The ShellBot, also known as PerlBot, is a Perl-based DDoS bot that uses IRC […]

Security Affairs