[ad_1]
A botnet called HEH removes all data from the computers it infects – not your personal computer, your servers, not even your IoT devices are safe from it.
A newly discovered zombie virus contains code that erases all data on the attacked system. A botnet called HEH launches a “brute force” attack on systems that connect to the Internet through Telnet ports (23 or 2323) based on a quick and continuous password attempt. If the device uses a default or easy-to-guess Telnet authenticator, the botnet gains access to the system and immediately downloads one of the seven binary codes that install digital malware, Computerworld writes in its description.
The infected devices then connect to the robotic network and launch brute-force attacks against other machines, so that the malicious code quickly spreads across networks. If it succeeds in cracking the password, it performs a predefined shell sequence that removes all partitions on the device.
The malicious code was discovered by Netlab security researchers, who said it is difficult to know whether deleting partitions is intentional or just a poorly programmed self-destruct routine. But it doesn’t really matter, because many machines can become inoperable with it, so far only in theory, because fortunately the function has not yet been used, adds the portal, which says that the most important thing is that network operators update passwords and choose complicated versions. Routers, smart IoT devices, and even Linux servers are at risk.
[ad_2]
