Remaiten is
malware
Malware (a portmanteau of ''malicious software'')Tahir, R. (2018)A study on malware and malware detection techniques . ''International Journal of Education and Management Engineering'', ''8''(2), 20. is any software intentionally designed to caus ...
which infects
Linux
Linux ( ) is a family of open source Unix-like operating systems based on the Linux kernel, an kernel (operating system), operating system kernel first released on September 17, 1991, by Linus Torvalds. Linux is typically package manager, pac ...
on embedded systems by
brute forcing using frequently used default username and
passwords
A password, sometimes called a passcode, is secret data, typically a string of characters, usually used to confirm a user's identity. Traditionally, passwords were expected to be memorized, but the large number of password-protected services ...
combinations from a list in order to infect a system.
Remaiten combines the features of the Tsunami and
LizardStresser (aka Torlus) malware families.
The command and control for Remaiten are handled by IRC communications. Additionally the command and control is done by an actual IRC channel rather than only the IRC protocol. This is an improvement over bots such as Tsunami and
Torlus making Remaiten a greater threat than both combined.
To avoid detection, Remaiten tries to determine the platform of a device to download the architecture-appropriate component from the command & control server.
Once Remaiten infects a device it is able to perform actions such as launching distributed denial of service attacks or download more malware on a device. Remaiten is able to scan and remove competing bots on a system compromised by it.
See also
*
Botnet
A botnet is a group of Internet-connected devices, each of which runs one or more Internet bot, bots. Botnets can be used to perform distributed denial-of-service attack, distributed denial-of-service (DDoS) attacks, steal data, send Spamming, sp ...
*
Mirai (malware)
Mirai (from the Japanese word for "future", 未来) is malware that turns networked devices running Linux into remotely controlled bots that can be used as part of a botnet in large-scale network attacks. It primarily targets online consumer dev ...
*
BASHLITE
*
Linux.Darlloz
*
Linux.Wifatch
*
Hajime (malware)
References
{{Hacking in the 2010s
IoT malware
Linux malware
Botnets