{ads}

ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers



October 12, 2023 at 04:57PM

The threat actors behind ShellBot are leveraging IP addresses transformed into its hexadecimal notation to infiltrate poorly managed Linux SSH servers and deploy the DDoS malware. "The overall flow remains the same, but the download URL used by the threat actor to install ShellBot has changed from a regular IP address to a hexadecimal value," the AhnLab Security Emergency response Center (ASEC)

from The Hacker News https://ift.tt/6X4PlQZ

0 Response to "ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers"

Post a Comment

Article Top Ads

Central Ads Article 1

Middle Ads Article 2

Article Bottom Ads