< Back
cyberthreat news
07 December 2023

New Chaos malware infects Windows, Linux devices for DDoS attacks

According to research by the BlackLotus lab, a new botnet called Chaos, written in Chinese and using a Chinese-based command and control (C2) infrastructure, has entered the botnet market. It is growing rapidly, targeting and infecting Windows and Linux devices to use for cryptomining and launching DDoS attacks.  

It has been targeting a wide range of industries since April this year and has focused on European targets, although the bots have spread worldwide. While it spreads primarily by attacking devices unpatched for various security flaws, Chaos also uses stolen SSH keys to hijack other devices.  

It also opens a backdoor on hijacked devices that allows attackers to reconnect at any time to continue the exploit. 

Read more about it : here