SYMBOLCOMMON_NAMEaka. SYNONYMS
elf.airdrop (Back to overview)

AirDropBot

aka: CloudBot

AirDropBot is used to create a DDoS botnet. It spreads as a worm, currently targeting Linksys routers. Backdoor and other bot functionality is present in this family. Development seems to be ongoing.

References
2019-09-28 ⋅ The MalwareMustDie Blog ⋅ unixfreaxjp
MMD-0064-2019 - Linux/AirDropBot
AirDropBot

There is no Yara-Signature yet.