Kairos botnet infects Linux hosts through passwordless Telnet
Nozomi honeypots saw the same Go binary, which holds thousands of TCP sockets open during each attack.
52
Nozomi honeypots saw the same Go binary, which holds thousands of TCP sockets open during each attack.
Nozomi says the Go bot arrives over Telnet with an empty root password and has no persistence.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views