Technical Information
Malicious functions:
Removes itself
Launches itself as a daemon
Substitutes application name for:
- bash
Network activity:
Establishes connection:
- <LOCAL_DNS_SERVER>
Attacks using a special dictionary (brute-force technique) via the Telnet protocol.
DNS ASK:
- na###murf.net
