SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.abcbot (Back to overview)

Abcbot

Abcbot is a modular Go-based botnet and malware that propagates via exploits and brute force attempts. The botnet was observed launching DDoS attacks, perform internet scans, and serve web pages. It is probably linked to Xanthe-based clipjacking campaign.

References
2022-01-10 ⋅ Cado Security ⋅ Matt Muir
Abcbot - An Evolution of Xanthe
Abcbot Xanthe
2021-12-21 ⋅ Cado Security ⋅ Matt Muir
The Continued Evolution of Abcbot
Abcbot
2021-12-02 ⋅ lacework ⋅ Lacework Labs
ABC Botnet Attacks on the Rise
Abcbot
2021-11-09 ⋅ 360 netlab ⋅ Alex.Turing, Hui Wang
Abcbot, an evolving botnet
Abcbot

There is no Yara-Signature yet.