A backdoor for Linux written in Rust. The Trojan uses the https://github.com/aatxe/irc library and gets commands over the IRC (Internet Relay Chat) protocol. It can perform the following actions:

Command	Value
!login secure2016@	Authorize to send commands to a bot
!sinfo <*\|botName>	Send data on an infected computer
!processes <*\|botName>	Send a list of running processes
!kill <*\|botName>	Terminate operation of a specified bot
!update <*\|botName>	Not implemented. The “Downloading update right now...” message is displayed.

News about the Trojan

Curing recommendations

Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number