Threat Actors Target Linux SSH Servers to Deploy SVF Botnet

Cybersecurity researchers have uncovered a sophisticated campaign targeting poorly secured Linux servers through SSH brute force attacks to deploy the SVF Botnet, a Python-based distributed denial-of-service (DDoS) malware.

This malware utilizes Discord for its command-and-control infrastructure and employs multiple proxy servers to enhance its attack capabilities. The SVF Botnet marks a significant evolution in DDoS tools, merging traditional brute force methods with modern communication platforms.

Attackers exploit Linux servers with weak SSH credentials, turning compromised systems into powerful DDoS weapons capable of launching both Layer 7 HTTP floods and Layer 4 UDP floods. ASEC analysts detected this malware through honeypot monitoring, which revealed numerous attempts to compromise SSH services.

NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, Z Plus Security