Infrastructure security company Nozomi Networks uncovered new malware called Kairos that targets devices and servers running Linux. According to The Hacker News, the malware is written in the Go programming language and turns every compromised device into part of a botnet, a network of remotely controlled devices used for denial-of-service (DDoS) attacks.
How it gets in
According to summaries, Kairos enters through internet-exposed services such as Telnet protected by default passwords nobody changed. It is an old, simple method but still very effective, because millions of devices worldwide, from cameras to routers and small servers, are connected with the factory password.
Why it is worrying
DDoS attacks flood a site or service with huge numbers of requests until it collapses. Large botnets can take down government sites, banks and online stores. Israel knows this type of attack well; it usually comes in waves around security and political events.
What to do
Change every default password on connected devices, turn off old services such as Telnet that aren't needed, and don't expose management interfaces to the internet. These steps are simple and prevent most infections by botnets of this kind.
