#perlbot - Twitter Hashtag

about 1 hour ago

Weak SSH creds get Linux servers a rootkit, ShellBot and a hidden XMRig miner posing as -bash. https://t.co/mZiw3cPzcJ #ThreatIntel #PerlBot #Fisieredoor #XHide

threadlinqs's tweet photo. Weak SSH creds get Linux servers a rootkit, ShellBot and a hidden XMRig miner posing as -bash. https://t.co/mZiw3cPzcJ #ThreatIntel #PerlBot #Fisieredoor #XHide https://t.co/1BcUCR728F

0

7

sicehice @sicehice

over 3 years ago

PHP-CGI RCE exploit attempt detected 2023-04-11 14:05:03 UTC Source IP: 104.248.142.60 Payload: hxxp://207.246.71.152/testperl MD5: 17fe866efe0f1e3dfc7cae1b8bee7d26 #perlbot #shellbot #ircbot

sicehice's tweet photo. PHP-CGI RCE exploit attempt detected

2023-04-11 14:05:03 UTC
Source IP: 104.248.142.60

Payload: hxxp://207.246.71.152/testperl
MD5: 17fe866efe0f1e3dfc7cae1b8bee7d26

#perlbot #shellbot #ircbot https://t.co/9Lnqh7J2Fh

0

9

1

4

2K

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

over 3 years ago

ASEC has recently discovered the #ShellBot, also known as #PerlBot, malware being installed on poorly managed Linux SSH servers. If ShellBot is installed, Linux servers can be used as DDoS Bots for DDoS attacks against specific targets. https://t.co/zaCcVrKpBS

AhnLab_ASEC's tweet photo. ASEC has recently discovered the #ShellBot, also known as #PerlBot, malware being installed on poorly managed Linux SSH servers.

If ShellBot is installed, Linux servers can be used as DDoS Bots for DDoS attacks against specific targets.

https://t.co/zaCcVrKpBS https://t.co/wI0XW7QPuq

0

1

2

0

476

Germán Fernández

@1ZRR4H

over 4 years ago

Es el turno de #PerlBot aka #ShellBot (DDoS/Scan IRC botnet 🧓) vía CVE-2022-1388. IP origen: 158.69.0.205 Payload desde: http://158.69.0.205/sitemap1.jpg + https://t.co/1M0fs4EDBa

1ZRR4H's tweet photo. Es el turno de #PerlBot aka #ShellBot (DDoS/Scan IRC botnet 🧓) vía CVE-2022-1388.

IP origen: 158.69.0.205
Payload desde: http://158.69.0.205/sitemap1.jpg

+ https://t.co/1M0fs4EDBa https://t.co/2kcgHshzAw

1

10

4

0

SecurityTrails, A Recorded Future Company @securitytrails

almost 6 years ago

Threat actors are now using a combination of Shellshock and Perlbot to target Webmin (a web-based management package) on its default port of 10000 #webmin #shellshock #perlbot #infosec https://t.co/gX7DrvZDm7

0

3

0

Odisseus @_odisseus

over 7 years ago

It's 2019 yet these classic #DDoS #malware: #ELF (#Tsunami/#Kaiten) & #PerlBot are still active! Via @malwaremustd1e https://t.co/G6VzPWOHLC

0

7

2

0

☩MalwareMustDie

@malwaremustdie

over 7 years ago

It's #2019 yet these classic #DDoS #malware: #ELF (Tsunami/#Kaiten) & #PerlBot are active! 1) Nodes to BLOCK: kaiten[.]do-dear[.]com 5[.]196[.]137.215 | ASN: AS16276 | PRE: 5.196.0.0/16 | OVH, | FR 2) Avoid these bad actors in IRC(see pic) https://t.co/65Fg5IcYNQ #MalwareMustDie!