BASHLITE

BASHLITE (also known as Gafgyt, Lizkebab, PinkSlip, Qbot, Torlus and LizardStresser) is

The original version in 2014 exploited a flaw in the bash shell - the Shellshock software bug - to exploit devices running BusyBox.^[4][5][6][7] A few months later a variant was detected that could also infect other vulnerable devices in the local network.^[8] In 2015 its source code was leaked, causing a proliferation of different variants,^[9] and by 2016 it was reported that one million devices have been infected.^{[10][11][12][13]}

Of the identifiable devices participating in these botnets in August 2016 almost 96 percent were

BASHLITE is written in C, and designed to easily cross-compile to various computer architectures.^[9]

Exact capabilities differ between variants, but the most common features

It propagates via brute forcing, using a built-in dictionary of common usernames and passwords. The malware connects to random IP addresses and attempts to login, with successful logins reported back to the command and control server.

• Denial-of-service attack (DoS)
• Fork bomb
• Hajime (malware)
• LOIC
  • High Orbit Ion Cannon – the replacement for LOIC used in DDoS attacks
  • Low Orbit Ion Cannon – a stress test tool that has been used for DDoS attacks
• Mirai (malware)
• ReDoS
• Slowloris (computer security)