FritzFrog malware attacks SSH servers to mine Monero

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/fritzfrog-malware-attacks-linux-servers-over-ssh-to-mine-monero/

A sophisticated botnet campaign named FritzFrog has been discovered breaching SSH servers around the world, since at least January 2020.

Written in Golang, FritzFrog is both a worm and a botnet that targets government, education, and finance sectors.
The attack has already managed to infiltrate over 500 servers in the U.S. and Europe, of universities and a railway company.

The advanced nature of FritzFrog lies in its proprietary and fileless P2P implementation written from scratch.
The malware assembles and executes the malicious payload entirely in-memory, making it volatile.

Full report by researchers:

FritzFrog: A New Generation Of Peer-To-Peer Botnets - Guardicore

Guardicore has discovered FritzFrog, a sophisticated peer-to-peer (P2P) botnet. In this post we'll discuss how it was discovered and how it works.

www.guardicore.com