Xor DDoS

XOR DDoS is Trojan malware that hijacks Linux systems and uses them to launch DDoS attacks which have reached loads of 150+ Gbps. In order to gain access it launches a brute force attack in order to discover the password to Secure Shell services on Linux. Once Secure Shell credentials are acquired and login is successful, it uses root privileges to run a script that downloads and installs XOR DDoS. It appears to attack targets mostly based in Asia and is also believed to be of Asian origin based on its targets(which are tend to be located in Asia.). Several things have been noted in XOR DDoS, such as a rootkit and being able to be built in ARM and x86 systems and being programmed in C/C++.

See Also

• Application layer DDoS attack
• Botnet
• Command and control (malware)
• Dendroid (Malware)
• Denial-of-service attack
• Rootkit
• Zombie (computer science)
• ZeroAccess botnet