Abcbot Botnet
Summary
Go has become the preferred choice in cybercriminals circles as it offers cross-platform capabilities while making the malicious threats more difficult for detection and reverse engineering. At the time, the threat was relatively simple acting more as a scanner for attacking Linux devices that had weak passwords or could be infected via known vulnerabilities. As a result, the latest Abcbot versions support nine different DDoS attack methods including TLS, TCP, UDP, ACE, HTTP GET, and more. While Abcbot is clearly leaving the very early stages of its development and is moving towards maturity, it is apparent that the threat is still being actively iterated upon. As a result, the current Abcbot versions include a lot of inconsistencies such as reporting device information multiple times, lacking fully implemented webserver functionality, not registering the DGA domain names, etc.
Classifications
AskAI Classifications
LabelsLinked Companies
