A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process.
If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its ho...
**Source : The Hacker News | 28 juillet 2026**
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process.
If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its honeypots through Telnet credential brute force.
Tengu supports 25 distributed denial-of-service (
👉 **Lire l'article complet sur The Hacker News :** [https://thehackernews.com/2026/07/tengu-botnet-reboots-compromised-linux.html](https://thehackernews.com/2026/07/tengu-botnet-reboots-compromised-linux.html)
Commentaires (0)
Laisser un commentaire
Aucun commentaire pour le moment. Soyez le premier à commenter !