RobotoMalware
P2P Botnet discovered by Netlab360. The botnet infects linux servers via the Webmin RCE vulnerability (CVE-2019-15107) which allows attackers to run malicious code with root privileges and take over older Webmin versions.From MISP Galaxy
Last reported 4 months ago, by Red Canary1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from eachIndicators in its reports
named in the reports above- 51.3.97[.]221in 1 report
- 5e98eabef5ea551db4e9daa0264515b4in 1 report
- 70.152.145[.]147in 1 report
- hxxps://domoarigato[.]ai/in 1 report
- domoarigato[.]aiin 1 report
- hxxps://login.microsoftonline[.]com/$TargetEntraTenantID/oauth2/v2.0/tokenin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.