Field notes from the edge.

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

A new Mirai-based botnet named Tengu has been discovered with advanced persistence capabilities, including the ability to trigger device reboots via hardware watchdog timers when its main process is terminated. Nozomi Networks Labs detected the malware spreading through Telnet brute-force attacks on Linux devices. The botnet supports at least 25 different distributed denial-of-service attack metho