Statistics Report on Malware Targeting Linux SSH Servers in Q4 2025

Statistics Report on Malware Targeting Linux SSH Servers in Q4 2025

AhnLab SEcurity intelligence Center (ASEC) utilizes a honeypot to respond to and classify brute-force and dictionary attacks targeting poorly managed Linux SSH servers. This post covers the status of the attack sources identified in the logs from the fourth quarter of 2025 and the statistics of attacks launched by these

Statistics Report of Malware Targeting Linux SSH Servers in Q3 2025

Statistics Report of Malware Targeting Linux SSH Servers in Q3 2025

AhnLab SEcurity intelligence Center (ASEC) is using a honeypot to respond to and categorize brute-force and dictionary attacks that target poorly managed Linux SSH servers. This post covers the status of the attack sources identified in logs from the third quarter of 2025 and the statistics of attacks performed by

Statistical Report on Malware Targeting Linux SSH Servers  in Q2 2025

Statistical Report on Malware Targeting Linux SSH Servers in Q2 2025

Overview AhnLab SEcurity intelligence Center (ASEC) conducts response and classification of brute force or dictionary attacks targeting poorly managed Linux SSH servers using honeypots. This report will cover the status of attack sources identified in the second quarter of 2025 based on logs, as well as statistics on attacks performed

AhnLab Detection Information on BPFDoor Exploited in Recent Hacking Attacks and KISA Hash Notice

AhnLab Detection Information on BPFDoor Exploited in Recent Hacking Attacks and KISA Hash Notice

BPFDoor is a Linux-based backdoor malware. AhnLab previously published their EDR detection information on this malware through the ASEC blog in October 2024. KISA recently shared threat information and warnings on BPFDoor, which has been exploited in hacking attacks. V3 detection information on the hash values shared by KISA in

Statistical Report on Malware Targeting Linux SSH Servers in Q1 2025

Statistical Report on Malware Targeting Linux SSH Servers in Q1 2025

Overview AhnLab SEcurity intelligence Center (ASEC) conducts response and classification of brute force or dictionary attacks targeting poorly managed Linux SSH servers using honeypots. This report will cover the status of attack sources identified in the first quarter of 2025 based on logs, as well as statistics on attacks performed

Statistical Report on Malware Targeting Linux SSH Servers in Q4 2024

Statistical Report on Malware Targeting Linux SSH Servers in Q4 2024

Overview AhnLab SEcurity intelligence Center (ASEC) conducts response and classification of brute force or dictionary attacks targeting poorly managed Linux SSH servers using honeypots. This report will cover the status of attack sources identified in the fourth quarter of 2024 based on logs, as well as statistics on attacks performed

Statistical Report on Malware Targeting Linux SSH Servers in Q3 2024

Statistical Report on Malware Targeting Linux SSH Servers in Q3 2024

OverviewStatistics1. Status of Attacks Against Linux SSH Servers 2. Categorization of Malware Used in Attacks   2.1. IoT DDoS Bot   2.2. Linux SSH Server DDoS Bot   2.3. CoinMiner   2.4. Etc 3. Cases of Attacks in Q3 2024   3.1. Supershell Malware Conclusion    Overview   AhnLab SEcurity intelligence Center (ASEC) uses honeypots to respond to

Statistical Report on Malware Targeting Linux SSH Servers in Q2 2024

Statistical Report on Malware Targeting Linux SSH Servers in Q2 2024

Overview   AhnLab SEcurity intelligence Center (ASEC) uses honeypots to respond to and categorize brute force or dictionary attacks targeting poorly managed Linux SSH servers. This report will cover the status of attack sources identified in the second quarter of 2024 based on logs, as well as statistics on attacks