Chaos — Malware Profile

Chaos is Linux malware that compromises systems by brute force attacks against SSH services. Once installed, it provides a reverse shell to its controllers, triggered by unsolicited packets.

MITRE ATT&CK techniques (5)

• T1059.004 Unix Shell
• T1104 Multi-Stage Channels
• T1110 Brute Force
• T1205 Traffic Signaling
• T1573.001 Symmetric Cryptography

Read the full analysis on IntelFusions