Netskope Threat Labs

Hajime

ATP Sandbox Adv. HeuristicsAV

Hajime is a peer-to-peer botnet that spreads to IoT devices through exposed network services, notable for its decentralized design and for researchers' debate over whether its purpose was malicious or a self-aware security experiment.

First seen
May 2022
Last seen
September 2026
Alert Name
Gen:Variant.Trojan.Linux.Hajime.1
Linux.Backdoor.Hajime
Linux.Downloader.Hajime
Linux.Trojan.Hajime