SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.airdrop (Back to overview)

AirDropBot

aka: CloudBot

AirDropBot is used to create a DDoS botnet. It spreads as a worm, currently targeting Linksys routers. Backdoor and other bot functionality is present in this family. Development seems to be ongoing.

References
2019-09-28The MalwareMustDie Blogunixfreaxjp
@online{unixfreaxjp:20190928:mmd00642019:fae2e9c, author = {unixfreaxjp}, title = {{MMD-0064-2019 - Linux/AirDropBot}}, date = {2019-09-28}, organization = {The MalwareMustDie Blog}, url = {https://blog.malwaremustdie.org/2019/09/mmd-0064-2019-linuxairdropbot.html}, language = {English}, urldate = {2019-10-16} } MMD-0064-2019 - Linux/AirDropBot
AirDropBot

There is no Yara-Signature yet.