Netskope Threat Labs

Kaiji

ATP Sandbox Adv. HeuristicsAV

Kaiji is a DDoS malware written in Go that surfaced in late April 2020 and spreads through SSH brute force attacks against Linux servers. Recovered function names were English representations of Chinese words, and the name comes from strings found in samples.

First seen
September 2022
Last seen
October 2026
Alert Name
Gen:Variant.Trojan.Linux.Kaiji.1
Linux.Trojan.Kaiji
Trojan.Linux.Kaiji.6
Trojan.Linux.Kaiji.8
Trojan.Linux.Kaiji.A
Win32.Trojan.Kaiji