Unknown actors infected Linux devices of a variety of organisations across 21 countries with the XorDDoS Trojan between December 2022 and 15 August 2023, IT security company Palo Alto Networks reported on 16 October 2023. The unidentified threat actors compromised systems of organisations active in the semiconductor, telecommunications and retail industries as well as of transportation and finance companies. Hijacked devices were integrated into a botnet for conducting DDoS attacks.
Attack on North Korea
Unknown actors spread XorDDoS Trojan to build botnet spanning 21 countries beginning December 2022
- Date (as written)
- 01.12.2022
- Victim country
- India;India;India;India;India;Slovenia;Slovenia;Slovenia;Slovenia;Slovenia;Turkey;Turkey;Turkey;Turkey;Turkey;Thailand;Thailand;Thailand;Thailand;Thailand;Norway;Norway;Norway;Norway;Norway;United States;United States;United States;United States;United States;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of;Korea, Democratic People's Republic of;Brazil;Brazil;Brazil;Brazil;Brazil;Mexico;Mexico;Mexico;Mexico;Mexico;Azerbaijan;Azerbaijan;Azerbaijan;Azerbaijan;Azerbaijan;Pakistan;Pakistan;Pakistan;Pakistan;Pakistan;Italy;Italy;Italy;Italy;Italy;Peru;Peru;Peru;Peru;Peru;Colombia;Colombia;Colombia;Colombia;Colombia;Djibouti;Djibouti;Djibouti;Djibouti;Djibouti;Senegal;Senegal;Senegal;Senegal;Senegal;United Arab Emirates;United Arab Emirates;United Arab Emirates;United Arab Emirates;United Arab Emirates;Malaysia;Malaysia;Malaysia;Malaysia;Malaysia;Burkina Faso;Burkina Faso;Burkina Faso;Burkina Faso;Burkina Faso
- Actors (as written)
- Not attributed (Not attributed)
- Tags
- Hijacking with Misuse
- Source
- EuRepoC