{"id":4508,"date":"2017-04-29T03:40:05","date_gmt":"2017-04-28T19:40:05","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4508"},"modified":"2017-04-29T03:41:57","modified_gmt":"2017-04-28T19:41:57","slug":"hajime-botnet-reaches-300000-hosts-no-malicious-functions","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2017\/04\/hajime-botnet-reaches-300000-hosts-no-malicious-functions\/","title":{"rendered":"Hajime Botnet Reaches 300,000 Hosts With No Malicious Functions"},"content":{"rendered":"

This is not the first IoT heavy botnet, Mirai<\/a> takes that title, the interesting part is the Hajime botnet appears to be benign.<\/p>\n

\"Hajime<\/p>\n

So far no malicious functions have been detected in the codebase, other than the ability to replicate itself and block other malware, Hajime seems to have no DDoS or offensive mechanisms.<\/p>\n

Hajime \u2013 the “vigilante” IoT worm that blocks rival botnets \u2013 has built up a compromised network of 300,000 malware-compromised devices, according to new figures from Kaspersky Lab.<\/p>\n

The steadily spreading Hajime IoT worm fights the Mirai botnet for control of easy-to-hack IoT products. The malware is billed as a vigilante-style internet clean-up operation but it might easily be abused as a resource for cyber-attacks, hence a growing concern among security watchers.<\/p>\n

Hajime, like Mirai before it, takes advantage of factory-set (default) username and password combinations to brute-force its way into unsecured devices with open Telnet ports. The malware was first discovered [PDF] by security researchers at Rapidity Networks in October 2016. Since then it has spread steadily but inexorably. Most of the targets have turned out to be Digital Video Recorders, followed by webcams and routers, according to Kaspersky Lab.<\/p>\n

Hajime avoids several networks, including those of General Electric, Hewlett-Packard, the US Postal Service, the United States Department of Defense, and a number of private networks. Infections had primarily come from Vietnam (over 20 per cent), Taiwan (almost 13 per cent) and Brazil (around 9 per cent).<\/p><\/blockquote>\n