Just found this IRC "advice" in a QBOT dropper 
pic.twitter.com/XXnGEIH9ke
Are you sure this is Qbot? (aka QakBot) AFAIK it's Windows only, but maybe it's something new - or I'm simply wrong. Thanks! :)
-
-
Mirai contains in its source code functions to detect and kill QBOT, these ELF don't run on Win32 so I think there is 2 families having the same name ?pic.twitter.com/ixBhaQSVSQ
-
Here is an extract of some datastrings, the bot prefix is "[H4CK3R|1337]" and It's detected as Tsunami, what do you think ?pic.twitter.com/IUCNvARt0F
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.