"NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining"

Since early 2023, threat actors have been using a new Mirai-based botnet called NoaBot as part of a cryptocurrency mining campaign. According to Akamai security researcher Stiv Kupchik, the new botnet's capabilities include a wormable self-spreader and an SSH key backdoor to download and execute additional binaries or spread to new victims. Mirai source code was leaked in 2016, which has given rise to several botnets. NoaBot is suspected of being connected to another botnet campaign involving the P2PInfect malware family that was recently updated to target routers and Internet of Things (IoT) devices. This article continues to discuss findings regarding the NoaBot botnet.

THN reports "NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining"

Submitted by grigby1

Submitted by Gregory Rigby on