Description
Tsunami is a botnet that targets Linux systems, conscripting servers and devices into distributed denial of service networks controlled through IRC channels. It compromises hosts through weak credentials and exposed services, and its operators issue flooding commands against chosen targets. The family has circulated for decades under several names, and its simple, effective design keeps it relevant wherever unmanaged Linux systems face the internet.
Stats
- First seen
- February 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Backdoor.Linux.Tsunami.BI |
| Backdoor.Linux.Tsunami.DJ |
| Backdoor.Linux.Tsunami.FD |
| Backdoor.MAC.Tsunami.A |
| Backdoor.MAC.Tsunami.F |
| Gen:Variant.Backdoor.Linux.Tsunami.1 |
| Gen:Variant.Linux.Tsunami.1 |
| Gen:Variant.Linux.Tsunami.2 |
| Gen:Variant.Linux.Tsunami.3 |
| Gen:Variant.Linux.Tsunami.4 |
