[Intel]: https://bazaar.abuse.ch/browse/signature/XorDDoS/

[timb-machine]

Area

Malware binaries

Parent threat

Initial Access, Credential Access, Impact

Finding

https://bazaar.abuse.ch/browse/signature/XorDDoS/

Industry reference

attack:T1078:Valid Accounts
attack:T1100:Brute Force
attack:T1498:Network Denial of Service

Malware reference

XorDDoS
/malware/binaries/Unix.Trojan.Xorddos
/malware/binaries/Unix.Malware.Xorddos

Actor reference

No response

Component

Linux

Scenario

No response