New GoLang-Based HinataBot Exploiting Router and Server Flaws for DDoS Attacks

[MuzzMelbourne]

Content source

https://thehackernews.com/2023/03/new-golang-based-hinatabot-exploiting.html

A new Golang-based botnet dubbed HinataBot has been observed to leverage known flaws to compromise routers and servers and use them to stage distributed denial-of-service (DDoS) attacks.

"The malware binaries appear to have been named by the malware author after a character from the popular anime series, Naruto, with file name structures such as 'Hinata-<OS>-<Architecture>,'" Akamai said in a technical report.

Among the methods used to distribute the malware are the exploitation of exposed Hadoop YARN servers and security flaws in Realtek SDK devices (CVE-2014-8361), Huawei HG532 routers (CVE-2017-17215, CVSS score: 8.8).

New GoLang-Based HinataBot Exploiting Router and Server Flaws for DDoS Attacks

New Golang-based botnet exploits unpatched vulnerabilities and weak credentials to take over routers and servers and launch DDoS attacks

thehackernews.com