xorbot: A Stealthy Botnet Family That Defies Detection

I. Background of xorbot In November 2023, NSFOCUS Global Threat Hunting System detected that a type of elf file was being widely distributed and accompanied by a large amount of suspected encrypted outbound communication traffic. However, the detection rate of mainstream antivirus engines on this file was close to zero, which aroused our curiosity. After further […]

The post xorbot: A Stealthy Botnet Family That Defies Detection appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects …

antivirus blog botnet communication detection distributed elf encrypted family file global hunting large november november 2023 nsfocus rate system threat threat hunting traffic