Linux Trojan – Xorddos with Filename eyshcjdmzg, (Mon, Apr 29th)

This post was originally published on this site

I reviewed a filename I see regularly uploaded to my DShield sensor eyshcjdmzg that have been seeing since the 1 October 2023 which has multiple hashes and has been labeled as trojan.xorddos/ddos. These various files have only been uploaded to my DShield sensor by IP 218.92.0.60. Here is the timeline of the activity since 1 October 2023.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.