Linux Trojan - Xorddos with Filename eyshcjdmzg, (Mon, Apr 29th)

I reviewed a filename I see regularly uploaded to my DShield sensor eyshcjdmzg that have been seeing since the 1 October 2023 which has multiple hashes and has been labeled as trojan.xorddos/ddos. These various files have only been uploaded to my DShield sensor by IP 218.92.0.60. Here is the timeline of the activity since 1 October 2023.

Article Link: Linux Trojan - Xorddos with Filename eyshcjdmzg - SANS Internet Storm Center

1 post - 1 participant

Read full topic

ddos dshield filename files hashes linux linux trojan october sensor timeline trojan xorddos