Security News > 2022 > February > Researchers Warn of a New Golang-based Botnet Under Continuous Development

Cybersecurity researchers have unpacked a new Golang-based botnet called Kraken that's under active development and features an array of backdoor capabilities to siphon sensitive information from compromised Windows hosts.

The botnet - not to be confused with a 2008 botnet of the same name - is perpetuated using SmokeLoader, which chiefly acts as a loader for next-stage malware, allowing it to quickly scale in size and expand its network.

Current iterations of the botnet come with functions to maintain persistence, download files, run shell commands, and steal from different cryptocurrency wallets.

What's more, the botnet comes with an administration panel that enables the threat actor to upload new payloads, interact with a specific number of bots, and view command history and information about the victims.

Over time, Kraken has also emerged as a conduit for the deployment of other generic information stealers and cryptocurrency miners, netting the botnet operators around $3,000 every month.

"It is currently unknown what the operator intends to do with the stolen credentials that have been collected or what the end goal is for creating this new botnet," the researchers concluded.

News URL

https://thehackernews.com/2022/02/researchers-warn-of-new-golang-based.html