Tengu: a Mirai botnet that hijacks the hardware watchdog to resurrect on every reboot
Nozomi Networks Labs documents Tengu, a multi-architecture Linux botnet that abuses the kernel watchdog and rewrites reboot binaries to survive cleanup attempts - all controlled via ChaCha20/Poly1305.
2 h ago 9 2