• Source: Linux.Wifatch
  • Linux.Wifatch is an open-source piece of malware which has been noted for not having been used for malicious actions, instead attempting to secure devices from other malware.
    Linux.Wifatch operates in a manner similar to a computer security system and updates definitions through its Peer to Peer network and deletes remnants of malware which remain.
    Linux.Wifatch has been active since at least November 2014. According to its authors the idea for Linux.Wifatch came after reading the Carna paper.
    Linux.Wifatch was later released on GitLab by its authors under the GNU General Public License on October 5, 2015.


    Operation


    Linux.Wifatch's primary mode of infection is by logging into devices using weak or default telnet credentials. Once infected, Linux.Wifatch removes other malware and disables telnet access, replacing it with the message "Telnet has been closed to avoid further infection of this device. Please disable telnet, change telnet passwords, and/or update the firmware."


    See also


    Denial-of-service attack
    BASHLITE – another notable IoT malware
    Linux.Darlloz – another notable IoT malware
    Remaiten – another notable IoT malware
    Mirai – another notable IoT malware
    Hajime (malware) - malware which appears to be similar in purpose to Wifatch


    References




    External links


    Linux.Wifatch at GitLab

Kata Kunci Pencarian: