XorDdos

XorDdos is a malicious software (malware) that was discovered by Microsoft in 2014 and has been widely used in attacks against cloud and Internet of Things (IoT) deployments. The Linux Trojan targets Linux devices, causing disruptions and potentially stealing sensitive information. It has been linked to a significant surge in use and has been documented as a stealthy distributed denial-of-service (DDoS) malware. Researchers have found considerable overlap between XorDdos and another Linux malware called Krasue, particularly in the rootkit portions of both malwares. The similarities suggest that Krasue was likely created by the same author as XorDdos or at least someone who had access to the XorDdos source code. This connection points to a possible shared author or operator, indicating a broader network of malware threats exploiting similar vulnerabilities. In addition to this, it was observed that a separate Linux Remote Access Trojan (RAT), likely tied to the creators of XorDdos, had been operating undetected for nearly two years, targeting organizations in Thailand and maintaining malicious access to infected systems. This discovery further underscores the stealth and persistence of these threats. In conclusion, the link between XorDdos and other malwares such as Krasue highlights the need for continuous vigilance and advanced security measures to protect against evolving cyber threats.