Netskope Threat Labs

Bashlite

ATP Sandbox Adv. Heuristics

Bashlite is a malware family that infects Linux systems to launch distributed denial of service attacks, originally known as Bashdoor before that term came to refer to its exploit method. Its campaigns have generated attacks of up to 400 Gbps, and its code seeded many later IoT botnet families.

First seen
May 2022
Last seen
October 2026
Alert Name
Linux.Backdoor.Bashlite
Linux.Trojan.Bashlite