Threat Advisory

Updated RapperBot malware targets game servers in DDoS attacks

Threat: Malware
Criticality: High
[subscribe_to_unlock_form]

Summary:

Researchers have discovered a new campaign of the RapperBot botnet to carry out DDOS attacks on game servers. RapperBot is an IoT botnet malware that was first identified in June 2022. It spread through Telnet brute forcing and using weak credentials from a hardcoded list. The botnet is based on previously found Mirai malware with additional capabilities for persistence and defense evasion. The newer version has added support for Telnet brute-forcing along with supporting DoS attacks using the Generic Routing Encapsulation (GRE) tunnelling protocol as well as UDP floods servers.[/subscribe_to_unlock_form]

Summary:

Researchers have discovered a new campaign of the RapperBot botnet to carry out DDOS attacks on game servers. RapperBot is an IoT botnet malware that was first identified in June 2022. It spread through Telnet brute forcing and using weak credentials from a hardcoded list. The botnet is based on previously found Mirai malware with additional capabilities for persistence and defense evasion. The newer version has added support for Telnet brute-forcing along with supporting DoS attacks using the Generic Routing Encapsulation (GRE) tunnelling protocol as well as UDP floods servers.[emaillocker id="1283"]

Threat Profile:

References:

The following reports contain further technical details:

https://www.bleepingcomputer.com/news/security/updated-rapperbot-malware-targets-game-servers-in-ddos-attacks/

[/emaillocker]
crossmenu