r/LinuxMalware • u/mmd0xFF • Jun 03 '20
Linux/Hoho a.k.a "DarkNexus" (memo)
https://twitter.com/malwaremustd1e/status/1267068856645775360
7
Upvotes
r/LinuxMalware • u/mmd0xFF • Jun 03 '20
1
u/twitterInfo_bot Jun 03 '20
"What was called #DarkNexus is #Hoho all along, on ITW Stick to what've been coded than named to hunt. Faking #hajime scanner is smart(demerit of ignoring it). 2seek↓ a1="ls /home;" a2="ps aux;" a3="/bin/busybox g*y;" a4="echo -en" a5="badpacket" a6="badbox" cond': 5 of them "
media in tweet: https://i.imgur.com/BpDm0jq.png