Linux Rabbit is malware that targeted Linux servers and IoT devices in a campaign lasting from August to October 2018. It shares code with another strain of malware known as Rabbot. The goal of the campaign was to install cryptocurrency miners onto the targeted servers and devices.
|Enterprise||T1110||.003||Brute Force: Password Spraying|
|Enterprise||T1546||.004||Event Triggered Execution: .bash_profile and .bashrc|
|Enterprise||T1133||External Remote Services|
|Enterprise||T1033||System Owner/User Discovery|