Satori

Satori is a variant of the Mirai "Internet of Things" botnet malware, created by an individual known as IntelSecrets. This person modified the source code of Mirai to produce Satori, which was then supplied to others for illicit activities. The operators who used Satori were eventually apprehended and prosecuted. Satori infects devices and executes its predefined activities, such as scanning and spreading outbound or performing other variant-specific actions. In response to the challenges posed by malware like Satori, Yoav Cohen, CTO and co-founder of Satori (not related to the malware), developed the Universal Data Permissions Scanner. This tool simplifies data security and manages authorizations, providing companies with a clear view of data access permissions. It's freely available on GitHub, inviting all organizations to enhance their global data security. The Satori Threat Intelligence Team from Human Security discovered a significant adware campaign linked to Satori malware, marking it as the largest find in the group's history. They also uncovered a new build of ScrubCrypt, a malicious program being sold in underground communities and used in attacks on their customers. The team recommends reviewing resources for a better understanding of similar threats, like RedLine Stealer, and acknowledges the contributions of various cybersecurity organizations towards combating these threats.