Tag: xorddos

5 Attack Reports | 0 Vulnerabilities

Attack reports

Lessons from Ted Lasso for cybersecurity success

This article draws parallels between the popular TV show Ted Lasso and the cybersecurity industry, emphasizing the importance of intellectual curiosity in the field. The author, William Largent, discusses his approach to interviewing candidates for Talos, focusing on their innate curiosity rather t…
xorddos
initial access broker
cybersecurity news
lagtoy
2025-04-24
intellectual curiosity
lagtoy backdoor
cactus ransomware
ted lasso
cisco talos
hiring process
Published: April 24, 2025
Downloadable IOCs: 4

Roundup: Care what you share

This report discusses the importance of being mindful of the information shared online, particularly when using search engines and AI-powered tools. It highlights the risks associated with sharing personal data and preferences, which can be stored and used for advertising or other purposes. The aut…
xorddos
2025-04-17
data sharing
searxng
Published: April 17, 2025
Downloadable IOCs: 4

Unmasking the new XorDDoS controller and infrastructure

The XorDDoS trojan, a DDoS malware targeting Linux machines, continues to spread globally with over 70% of attacks targeting the United States from Nov 2023 to Feb 2025. The operators are believed to be Chinese-speaking individuals based on language settings. A new 'VIP version' of the XorDDoS cont…
linux
ddos
xorddos
brute-force
2025-04-17
Published: April 17, 2025
Downloadable IOCs: 0

File Hashes Analysis with Power BI from Data Stored in DShield SIEM

This analysis showcases the use of Power BI to examine file hash data from a DShield SIEM over a 60-day period. The process involved exporting data from Elastic Discover, importing it into Power BI, and creating visualizations for analysis. Key findings include the identification of an IP address (…
xorddos
redtail
siem
power bi
2025-03-13
dshield
visualization
ircbot
file hashes
data analysis
Published: March 13, 2025
Downloadable IOCs: 0

Linux Trojan - Xorddos with Filename eyshcjdmzg

This analysis examines a recurring Linux trojan called Xorddos, which is a distributed denial-of-service (DDoS) malware. It provides details on various file hashes associated with the malware, as well as indicators of compromise (IOCs) such as IP addresses, domains, and email addresses. The analysi…
linux
phishing
trojan
ddos
xorddos
eyshcjdmzg
Published: May 1, 2024
Downloadable IOCs: 11
Click here to see more Attack Reports