A new Mirai-based botnet called Noah Robot Threat actors have been using it as part of cryptocurrency mining campaigns since early 2023.
Akamai security researcher Stiv Kupchik said in a report shared with The Hacker News: “The capabilities of the new botnet NoaBot include a wormable self-propagating program and an SSH key backdoor that is used to download and execute other binaries or convert itself. spread to new victims.”
Mirai, whose source code was leaked in 2016, is the ancestor of many botnets, the most recent of which is InfectedSlurs, which is capable of launching distributed denial-of-service (DDoS) attacks.
There are indications that NoaBot may be related to another botnet campaign involving the Rust-based malware family P2PInfect, which recently received an update targeting routers and IoT devices.
This is based on the fact that threat actors also attempted to use P2PInfect as a replacement for NoaBot in recent attacks against SSH servers, suggesting a possible move toward custom malware.
Although NaoBot has a Mirai base, its extender module utilizes an SSH scanner to search for servers vulnerable to dictionary attacks in order to brute force them, and adds SSH public keys in the .ssh/authorized_keys file for remote storage. Pick. Alternatively, it could also download and execute additional binaries or spread itself to new victims after a successful exploit.
“NoaBot is compiled with uClibc, which seems to change the way antivirus engines detect malware,” Kupchik noted. “While other Mirai variants are typically detected via Mirai signatures, NoaBot’s antivirus signature is an SSH scanner or a general-purpose Trojan.”
In addition to employing obfuscation tactics to make analysis challenging, the attack chain ultimately led to the deployment of a modified version of the XMRig coin miner.
What makes this new variant superior to other similar Mirai botnet-based campaigns is that it does not contain any information about mining pools or wallet addresses, making it impossible to assess the profitability of illegal cryptocurrency mining schemes.
“Miners obfuscate their configurations and use custom mining pools to avoid exposing the wallet addresses used by miners,” Kupchik said, emphasizing a certain level of preparedness on the part of threat actors.
Akamai said it has identified 849 victim IP addresses so far, which are distributed around the world, with China reporting a high concentration, accounting for almost 10% of all attacks against its honeypots in 2023.
“The malware’s method of lateral movement is through a plain old SSH credential dictionary attack,” Kupchik said. “Restricting any network SSH access to your network can greatly reduce the risk of infection. In addition, using strong passwords (not default or randomly generated) passwords can also make your network more secure because malware can be used to guess A basic list of passwords.”
61 Comments
Pingback: Latest Mirai-based botnet targets SSH servers for cryptocurrency mining – Tech Empire Solutions
Pingback: Latest Mirai-based botnet targets SSH servers for cryptocurrency mining – Mary Ashley
Pingback: Latest Mirai-based botnet targets SSH servers for cryptocurrency mining – Paxton Willson
Hello there! Do you know if they make any plugins
to assist with Search Engine Optimization? I’m trying
to get my site to rank for some targeted keywords but I’m not seeing very good gains.
If you know of any please share. Thanks! You can read similar art here:
Eco bij
Time to make the entry.
sugar defender
Incorporating Sugar Defender into my everyday program overall well-being.
As somebody who prioritizes healthy eating, I appreciate the
added defense this supplement provides. Since beginning to take
it, I have actually noticed a marked enhancement in my power degrees and a substantial reduction in my desire for harmful
snacks such a such a profound impact on my every day life.
That is a really good tip especially to those fresh to the blogosphere. Short but very precise info… Thanks for sharing this one. A must read post!
After looking over a handful of the blog posts on your web site, I really like your technique of writing a blog. I book-marked it to my bookmark site list and will be checking back soon. Please visit my website too and tell me how you feel.
This is a really good tip particularly to those new to the blogosphere. Brief but very accurate information… Thanks for sharing this one. A must read post.
I could not refrain from commenting. Very well written.
Furthermore, U.S. freight railroad firms are privately owned and operated, with no government subsidies.
Having read this I thought it was very informative. I appreciate you taking the time and effort to put this article together. I once again find myself spending a lot of time both reading and posting comments. But so what, it was still worthwhile.
Every year you appear ahead to the latest destination for vacationing, consider Dubai tour for the unprecedented capabilities amongst family trip and group spots of the world.
Eberhard, Robert (September 2011).
Apparence4event created a chignon hairstyle with wide curls to give movement, and pure makeup with a reminder of white to deliver out the eyes of the mannequin, Valentina.
The heat colour palette provides this Empire-impressed bath a fantastic dignity and vigor that would make any owner really feel like a prince of the realm.
Hey, have you ever previously considered to write regarding Nintendo Dsi handheld?
Draws in Berolina chess are uncommon.
Nice post. I learn something new and challenging on websites I stumbleupon everyday. It’s always helpful to read content from other writers and practice a little something from other web sites.
Can I simply say what a reduction to search out someone who actually is aware of what theyre speaking about on the internet. You definitely know easy methods to bring an issue to gentle and make it important. More folks must read this and understand this facet of the story. I cant believe youre not more widespread because you undoubtedly have the gift.
There are some interesting cut-off dates in this article but I don’t know if I see all of them center to heart. There is some validity but I’ll take maintain opinion till I look into it further. Good article , thanks and we would like extra! Added to FeedBurner as effectively
wonderful points altogether, you simply gained a brand new reader. What would you recommend about your post that you made a few days ago? Any positive?
I seriously love your blog.. Very nice colors & theme. Did you make this amazing site yourself? Please reply back as I’m looking to create my very own website and would love to learn where you got this from or exactly what the theme is called. Thank you.
I am often to blogging and i also genuinely appreciate your website content continuously. The content has really peaks my interest. My goal is to bookmark your web site and keep checking for brand new info.
I tried to submit a comment earlier, although it has not shown up. I will remember this.
very good post, i definitely adore this amazing site, persist with it
As I web-site possessor I believe the content material here is rattling wonderful , appreciate it for your efforts. You should keep it up forever! Best of luck. Rent a car kosova
Last month, when i visited your blog i got an error on the mysql server of yours.:’..,
you are truly a good webmaster. The web site loading speed is amazing. It seems that you’re doing any unique trick. Moreover, The contents are masterwork. you’ve performed a excellent task in this topic!
I am extremely impressed together with your writing abilities neatly as with the structure for your weblog. Is this a paid subject matter or did you modify it yourself? Anyway stay up the nice high quality writing, it’s rare to peer a nice blog like this one nowadays.
All characters are very convincing and Bradley Cooper’s intelligent Eddie is so entertaining, convincing and endearing that you eventually love the character and rejoice every time he has to explain anything to the normal humans.
An outstanding share! I have just forwarded this onto a coworker who was conducting a little homework on this. And he actually ordered me lunch due to the fact that I found it for him… lol. So let me reword this…. Thank YOU for the meal!! But yeah, thanx for spending time to discuss this matter here on your web site.
Wow, incredible blog layout! How lengthy have you ever been blogging for? you make blogging look easy. The overall look of your site is magnificent, as smartly the content material!
It’s in reality a nice and useful piece of information. I am satisfied that you shared this helpful info with us. Please stay us informed like this. Thank you for sharing.
Hands down, Apple’s app store wins by a mile. It’s a huge selection of all sorts of apps vs a rather sad selection of a handful for Zune. Microsoft has plans, especially in the realm of games, but I’m not sure I’d want to bet on the future if this aspect is important to you. The iPod is a much better choice in that case.
Good stuff, thanks for posting this article. This is a solid reasouce with some useful information. I’ll put this in my bookmarks = ).
I seriously love your website.. Pleasant colors & theme. Did you create this web site yourself? Please reply back as I’m wanting to create my very own site and would like to find out where you got this from or what the theme is called. Kudos.
Oh my goodness! an excellent article dude. Thank you Nonetheless We’re experiencing problem with ur rss . Don’t know why Can not register for it. Perhaps there is anyone finding identical rss dilemma? Anybody who knows kindly respond. Thnkx
Glad to be one of several visitants on this amazing web site : D.
Thank you for sharing superb informations. Your site is so cool. I am impressed by the details that you have on this site. It reveals how nicely you perceive this subject. Bookmarked this website page, will come back for more articles. You, my pal, ROCK! I found just the info I already searched everywhere and simply couldn’t come across. What a great web-site.
Hello There. I found your blog using msn. This is a really well written article. I’ll be sure to bookmark it and return to read more of your useful information. Thanks for the post. I’ll certainly comeback.
Thank you for taking the time to publish such a detailed and informative write-up.
There is noticeably big money comprehend this. I suppose you made certain nice points in functions also.
Hi. Cool post. There’s an issue with your site in chrome, and you may want to test this… The browser is the marketplace chief and a good element of people will omit your excellent writing because of this problem.
Awesome! What a great idea and costs nothing! I have a HUGE maple tree in my backyard. Cant wait to make these roses next Fall. I think they would be even prettier combined with berries from beauty bush, early hollies and maybe some Fall seed pods from other flowers/plants. Many thanks for sharing your creativity and for all the creative comments that followed this posting.
Resources similar to the one a person pointed out here may well be very useful to me! I will set up a link to this web page on my small blog. I’m particular my personal site visitors will discover which really helpful.
After a short time, regular commenters begin to make a community. It starts to feel intrusive to insert yourself.
bluetooth headsets are great because they are wireless and your movement is not limited by wires”
Hey there! Someone in my Myspace group shared this website with us so I came to take a look. I’m definitely enjoying the information. I’m bookmarking and will be tweeting this to my followers! Excellent blog and outstanding style and design.
Superb post but I was wanting to know if you could write a litte more on this subject? I’d be very thankful if you could elaborate a little bit further. Many thanks!
We’re a gaggle of volunteers and starting a brand new scheme in our community. Your site provided us with useful info to work on. You’ve done a formidable process and our entire neighborhood might be thankful to you.
The next time I read a weblog, I hope that it doesnt disappoint me as much as this one. I mean, I do know it was my option to learn, but I truly thought youd have something fascinating to say. All I hear is a bunch of whining about something that you may repair for those who werent too busy searching for attention.
I genuinely treasure your work , Great post.
When I originally commented I seem to have clicked on the -Notify me when new comments are added- checkbox and from now on every time a comment is added I receive four emails with the same comment. Perhaps there is a way you are able to remove me from that service? Thanks.
This web site is my breathing in, very great layout and perfect content material .
I think this site has got some very excellent info for everyone : D.
Great advice I recently encounter your blog and have been reading along. I thought I would leave my primary comment. I don’t know what toexposeexcept that I have enjoyed reading. Correct blog. I will keep visiting this blog very many.
Terrific write-up! Thought about savored the actual scanning. I’m hoping you just read additional by you. There’s no doubt you could have wonderful awareness in addition to ability to see. My corporation is really prompted keeping this particulars.
I don’t even know how I ended up right here, but I believed this submit used to be great. I don’t understand who you’re however certainly you are going to a famous blogger should you are not already Cheers!
Some times its a pain in the ass to read what website owners wrote but this site is very user friendly!
This is really serious, You’re an incredibly efficient writer. I have joined with your feed and also will enjoy finding your incredible write-ups. In addition, I have shared your blog post with our social networking sites.