Malware: Linux Rabbit

Description

[Linux Rabbit](https://attack.mitre.org/software/S0362) is malware that targeted Linux servers and IoT devices in a campaign lasting from August to October 2018. It shares code with another strain of malware known as Rabbot. The goal of the campaign was to install cryptocurrency miners onto the targeted servers and devices.(Citation: Anomali Linux Rabbit 2018)

External References

• mitre-attack
• anomali-linux-rabbit
• Anomali Linux Rabbit 2018

Techniques Used by This Malware

• T1033 — System Owner/User Discovery
• T1078 — Valid Accounts
• T1110.003 — Password Spraying
• T1132 — Data Encoding
• T1133 — External Remote Services
• T1546.004 — Unix Shell Configuration Modification