Malware
malware:aidra_botnet
Also: Aidra
Malicious botnet observed infecting some of the same systems as the Carna Botnet.
Malicious botnet observed infecting some of the same systems as the Carna Botnet.
“It was known as the Aidra Botnet. But the Aidra Botnet had malicious intent.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | EXPLOITS | weak default passwords | Explicit | 13 |
| outgoing | USES | denial-of-service attack | Explicit | 13 |
| incoming | RELATED_TO | Carna Botnet | Explicit | 13 |
Carna Botnet RELATED_TO Aidra Botnet
Aidra was found on some of the same computers as Carna and used the same vulnerabilities, creating an operational relationship between the two botnets.
Explicit Confidence 99% · Jack Rhysider EP 13 Details
“They were finding this other botnet on the same computers that the Carna Botnet was installed on. It was known as the Aidra Botnet.”
“Aidra had infected over 30,000 of the same computers as the Carna Botnet.”
Aidra Botnet EXPLOITS weak default passwords
Aidra used the same weak default-password vulnerability as the Carna Botnet.
Explicit Confidence 97% · Jack Rhysider EP 13 Details
“someone else was also building a botnet and using the exact same vulnerabilities”
Aidra Botnet USES denial-of-service attack
Aidra was used to take down computers and was characterized as having malicious intent.
Explicit Confidence 90% · Jack Rhysider EP 13 Details
“It was being used to take down computers and did bad things.”