Statistical Report on Malware Targeting Linux SSH Servers in Q4 2024

Statistical Report on Malware Targeting Linux SSH Servers in Q4 2024

Overview AhnLab SEcurity intelligence Center (ASEC) conducts response and classification of brute force or dictionary attacks targeting poorly managed Linux SSH servers using honeypots. This report will cover the status of attack sources identified in the fourth quarter of 2024 based on logs, as well as statistics on attacks performed

cShell DDoS Bot Attack Case Targeting Linux SSH Server (screen and hping3)

cShell DDoS Bot Attack Case Targeting Linux SSH Server (screen and hping3)

AhnLab SEcurity intelligence Center (ASEC) monitors attacks against poorly managed Linux servers using multiple honeypots. Among the prominent honeypots are SSH services using weak credential information, which are targeted by numerous DDoS and CoinMiner threat actors. ASEC recently identified a new DDoS malware strain targeting Linux servers while monitoring numerous