Linux Rabbit
- ID
- S0362
- Type
- Malware
- Platforms
- Linux
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
Linux Rabbit is malware that targeted Linux servers and IoT devices in a campaign lasting from August to October 2018. It shares code with another strain of malware known as Rabbot. The goal of the campaign was to install cryptocurrency miners onto the targeted servers and devices.[1]
Techniques used (6)
- T1033 System Owner/User Discovery
- T1078 Valid Accounts
- T1110.003 Password Spraying
- T1132 Data Encoding
- T1133 External Remote Services
- T1546.004 Unix Shell Configuration Modification