Linux.Siggen.7192
Added to the Dr.Web virus database:
2024-04-19
Virus description added:
2024-04-19
Technical Information
Malicious functions:
Launches itself as a daemon
Substitutes application name for:
Network activity:
Awaits incoming connections on ports:
Establishes connection:
- 8.#.8.8:53
- 45.###.232.208:33335
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
DNS ASK:
Sends data to the following servers:
- 45.###.232.208:33335
- 20#.##.106.170:23
- 23#.##6.53.133:23
- 32.###.216.239:23
- 10#.##9.21.64:23
- 17#.##.40.124:23
- 41.##.145.2:23
- 19.###.58.142:23
- 62.###.12.189:23
Receives data from the following servers:
Curing recommendations
Linux
Free trial
One month (no registration) or three months (registration and renewal discount)
このウェブサイトを継続して訪問する場合、訪問者に関する統計データを収集するためのCookieファイルおよび他のテクノロジーを弊社が利用することに同意したものとします。詳細