Malwarehigh
Roboto, a new P2P botnet targets Linux Webmin servers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-15107 | Unauthenticated Command Injection RCE in Webmin <= 1.920 | 9.8 | 100% | KEVRansomwarePoC ×5 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha256 | 60ff4a4203433aa2333a008c1b305cd80846834b9be4bba274f873831f04df1c | ature algorithm. At the same time, the check public key is: 60FF4A4203433AA2333A008C1B305CD80846834B9BE4BBA274F873831F04DF1C , the public key is integrated into each of the Roboto Bot |
From the original article
2 min read at securityaffairs.com
Security experts discovered a new peer-to-peer (P2P) botnet dubbed Roboto that is targeting Linux servers running unpatched Webmin installs. Researchers at 360Netlab discovered a new P2P botnet, tracked as Roboto, that is targeting Linux servers running unpatched installations of Webmin installs. T he experts first spotted the Roboto botnet in August when they detected a suspicious ELF file.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.