Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers

Teilen:

Cybersecurity researchers have unearthed new samples of malware called RapperBot that are being used to build a botnet capable of launching Distributed Denial of Service (DDoS) attacks against game servers.

“In fact, it turns out that this campaign is less like RapperBot than an older campaign that appeared in February and then mysteriously disappeared in the middle of April,” Fortinet FortiGuard Labs researchers Joie Salvio and Roy Tay sagte in a Tuesday report.

RapperBot, which was first documented by the network security firm in August 2022, is known to exclusively brute-force SSH servers configured to accept password authentication.

The nascent malware is heavily inspired by the Mirai botnet, whose source code leaked in October 2016, leading to the rise of several variants.

What’s notable about the updated version of RapperBot is its ability to perform Telnet brute-force, in addition to supporting DoS attacks using the Generic Routing Encapsulation (GRE) tunneling protocol as well as UDP floods targeting game servers running Grand Theft Auto: San Andreas.

“The Telnet brute-forcing code is designed primarily for self-propagation and resembles the old Mirai Satori botnet,” the researchers said.

Bild41 1

This list of hard-coded plaintext credentials, which are default credentials associated with IoT devices, are embedded into the binary as opposed to retrieving it from a command-and-control (C2) server, a behavior that was observed in artifacts detected after July 2022.

A successful break-in is followed by reporting the credentials used back to the C2 server and installing the RapperBot payload on the hacked device.

 

Fortinet said the malware is designed to only target appliances that run on ARM, MIPS, PowerPC, SH4, and SPARC architectures, and halt its self-propagation mechanism should they be running on Intel chipsets.

What’s more, the October 2022 campaign has been found to share overlaps with other operations involving the malware as far back as May 2021, with the Telnet spreader module making its first appearance in August 2021, only to be removed in later samples and reintroduced last month.

“Based on the undeniable similarities between this new campaign and the previously reported RapperBot campaign, it is highly likely that they are being operated by a single threat actor or by different threat actors with access to a privately-shared base source code,” the researchers concluded.

https://thehackernews.com/2022/11/warning-new-rapperbot-campaign-aims-to.html

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
5:19 am, Juli 11, 2025
Wetter-Symbol 17°C
L: 16° | H: 18°
aufgelockerte Bewölkung
Luftfeuchtigkeit: 82 %
Druck: 1021 mb
Wind: 5 mph E
Windböe: 0 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 39%
Regen Chance: 0%
Sichtbarkeit: 10 km
Sonnenaufgang: 4:56 am
Sonnenuntergang: 9:15 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 10:00 pm
Wetter-Symbol
16° | 18°°C 0 mm 0% 8 mph 79 % 1021 mb 0 mm/h
Tomorrow 10:00 pm
Wetter-Symbol
19° | 30°°C 0 mm 0% 10 mph 66 % 1019 mb 0 mm/h
So. Juli 13 10:00 pm
Wetter-Symbol
18° | 30°°C 0 mm 0% 7 mph 71 % 1015 mb 0 mm/h
Mo. Juli 14 10:00 pm
Wetter-Symbol
18° | 28°°C 1 mm 100% 15 mph 84 % 1016 mb 0 mm/h
Di. Juli 15 10:00 pm
Wetter-Symbol
14° | 20°°C 1 mm 100% 14 mph 81 % 1017 mb 0 mm/h
Today 7:00 am
Wetter-Symbol
17° | 18°°C 0 mm 0% 2 mph 79 % 1021 mb 0 mm/h
Today 10:00 am
Wetter-Symbol
23° | 26°°C 0 mm 0% 2 mph 62 % 1021 mb 0 mm/h
Today 1:00 pm
Wetter-Symbol
30° | 30°°C 0 mm 0% 3 mph 32 % 1020 mb 0 mm/h
Today 4:00 pm
Wetter-Symbol
32° | 32°°C 0 mm 0% 4 mph 26 % 1018 mb 0 mm/h
Today 7:00 pm
Wetter-Symbol
30° | 30°°C 0 mm 0% 6 mph 29 % 1017 mb 0 mm/h
Today 10:00 pm
Wetter-Symbol
23° | 23°°C 0 mm 0% 8 mph 49 % 1019 mb 0 mm/h
Tomorrow 1:00 am
Wetter-Symbol
21° | 21°°C 0 mm 0% 5 mph 57 % 1019 mb 0 mm/h
Tomorrow 4:00 am
Wetter-Symbol
19° | 19°°C 0 mm 0% 5 mph 66 % 1018 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€99,696.54
5.09%
Ethereum(ETH)
€2,534.67
7.10%
Fesseln(USDT)
€0.85
-0.01%
XRP(XRP)
€2.19
5.96%
Solana(SOL)
€140.59
4.71%
USDC(USDC)
€0.85
0.00%
Dogecoin(DOGE)
€0.169161
10.10%
Shiba Inu(SHIB)
€0.000011
8.42%
Pepe(PEPE)
€0.000011
15.55%
Peanut das Eichhörnchen(PNUT)
€0.247165
22.04%
Nach oben scrollen