IoT-Malware-Info

Gafgyt

http://www.antiy.net/p/series-two-of-bash-shellshock/

https://blog.fortinet.com/2017/01/20/linux-gafgyt-b-tr-exploits-netcore-vulnerability

http://blog.malwaremustdie.org/2016/02/mmd-0052-2016-skidddos-elf-distribution.html

Tsunami

http://blog.malwaremustdie.org/2013/05/story-of-unix-trojan-tsunami-ircbot-w.html

https://researchcenter.paloaltonetworks.com/2017/04/unit42-new-iotlinux-malware-targets-dvrs-forms-botnet/

http://www.zdnet.com/article/hacker-hundreds-were-tricked-into-installing-linux-mint-backdoor/

Remaiten

https://www.welivesecurity.com/la-es/2016/03/30/remaiten-bot-linux-routers/

Bill Gates

https://www.akamai.com/kr/ko/multimedia/documents/state-of-the-internet/bill-gates-botnet-threat-advisory.pdf

https://securelist.com/versatile-ddos-trojan-for-linux/64361/

https://habrahabr.ru/post/213973/

http://www.kernelmode.info/forum/viewtopic.php?f=16&t=3429

http://blog.malwaremustdie.org/2015/08/mmd-0039-2015-chinaz-made-new-malware.html

• Samples https://www.virustotal.com/en/file/6ec519a42efb59224ba5a5767a62f10f3356699cf3c6d70854a35115c9018442/analysis/1440249503/

https://www.virustotal.com/en/file/d00680b98ed9402233f2789bb31cfa3ef8d2aca734aa3fd9afa908125f597a89/analysis/1440249531/

Persirai

http://blog.trendmicro.com/trendlabs-security-intelligence/persirai-new-internet-things-iot-botnet-targets-ip-cameras/

IRCTelnet (New Aidra)

http://blog.malwaremustdie.org/2016/10/mmd-0059-2016-linuxirctelnet-new-ddos.html

• Samples https://www.detux.org/report.php?sha256=c79a27d2da7fe7abdf760a99e3981a4ff08d272a8c4a8a424f50a44073c19622

LuaBot

http://blog.malwaremustdie.org/2016/09/mmd-0057-2016-new-elf-botnet-linuxluabot.html

NyaDrop

http://blog.malwaremustdie.org/2016/10/mmd-0058-2016-elf-linuxnyadrop.html

Qbot

https://resources.baesystems.com/pages/terms.php?ref=39115&search=&order_by=relevance&offset=0&restypes=&starsearch=&archive=0&per_page=0&default_sort_direction=DESC&sort=DESC&context=Root&k=46713a20f9&curpos=&url=%2Fpages%2Fdownload_progress.php%3Fref%3D39115%26search%3D%26order_by%3Drelevance%26offset%3D0%26restypes%3D%26starsearch%3D%26archive%3D0%26per_page%3D0%26default_sort_direction%3DDESC%26sort%3DDESC%26context%3DRoot%26k%3D46713a20f9%26curpos%3D%26size%3D%26ext%3Dpdf

Hajime

https://security.rapiditynetworks.com/publications/2016-10-16/hajime.pdf

https://www.helpnetsecurity.com/2017/04/19/hajime-iot-worm/

http://news.softpedia.com/news/hajime-iot-worm-considerably-more-sophisticated-than-mirai-509423.shtml

https://gbhackers.com/hajime-worm-wrestle-mirai-botnet-control-iot-devices/

https://www.bleepingcomputer.com/news/security/security-experts-worry-as-hajime-botnet-grows-to-300-000-bots/

https://0x00sec.org/t/iot-malware-droppers-mirai-and-hajime/1966

• Samples https://www.detux.org/report.php?sha256=1550c3d50a2033aff94d9ce4bcde60ae188c74bafb9a2248dcf5533c054d9357

Moose

https://www.welivesecurity.com/2015/05/26/dissecting-linuxmoose/

ARM Honeypot

http://www.mathyvanhoef.com/2013/12/reversing-and-exploiting-arm-binaries.html

Mirai