Compromised Linux SSH servers engage in DDoS attacks, cryptomining
Compromised Linux SSH servers engage in DDoS attacks, cryptomining
20 June 2023
A threat actor is mounting dictionary attacks to log into Linux servers with SSH installed and saddle the server with the Tsunami and ShellBot DDoS bots, the XMRig CoinMiner program, and Log Cleaner – a tool for deleting and modifying logs.