A new botnet called Kairos is spreading to Linux devices through a very old mistake: a Telnet service that accepts the root user with no password.
Once inside, the attackers install a small Go-based program that turns the device into a node for DDoS operations. The campaign shows that basic security gaps still give attackers an easy path in.
Kairos does not use a complex exploit or a zero-day flaw. The attackers connect to exposed Telnet services and log in as root with an empty password.
Hackers Exploit Passwordless Telnet to Infect Linux Devices With New Kairos DDoS Botnet
Kairos botnet hijacks Linux devices through passwordless Telnet logins, turning them into nodes for DDoS attacks.
cybersecuritynews.com