TuxBot v3 Expands IoT Botnet Capabilities for DDoS Attacks
Broadcom's Symantec Security Center has highlighted TuxBot v3, an evolved IoT botnet that targets 17 hardware architectures for distributed denial-of-service (DDoS) attacks. The malware spreads by brute-forcing Telnet credentials and exploiting known vulnerabilities, then deploys architecture-specific bot binaries that communicate with a Go-based command-and-control infrastructure. To improve resilience, TuxBot v3 uses multiple fallback mechanisms, including domain generation algorithms (DGAs), peer-to-peer gossip protocols, and DNS TXT queries, making it more difficult to disrupt.
Symantec Enterprise Cloud