Skip to content

Malware

sustes miner

Sustes Malware doesn’t infect victims by itself (it’s not a worm) but it is spread over exploitation and brute-force activities with special focus on IoT and Linux servers.

sustes miner is a Linux malware family.

Background

Sustes is not a worm and does not propagate on its own; instead it is distributed through exploitation and brute-force campaigns aimed mainly at IoT devices and Linux servers. Its initial stage uses a custom wget run directly on the victim host, followed by a plain /bin/bash mr.sh. That mr.sh file is a straightforward bash script that drops and runs further software.


Source: Malpedia (Fraunhofer FKIE).