📎 AI Summary:
The thread discusses early reports of a Linux botnet (“wopbot”) exploiting the Shellshock Bash command interpreter vulnerability to scan and auto-infect other servers, with claims that it was targeting high-profile networks. The main question/concern is how quickly the flaw is being weaponized (including whether it reached organizations like the U.S. Department of Defense) and what the observed botnet behavior implies about the scale of exploitation. Overall sentiment is alarmed/urgent, reflecting concern about how fast attackers turned the disclosed vulnerability into active mass compromise.

whoosh

Cooler King
Staff member
Joined
Apr 15, 2009
Messages
48,248
Thread Author #1
Wopbot on the rampage.
Attackers have been quick to exploit the Shellshock Bash command interpreter bug disclosed yesterday by building a botnet that is currently trying to infect other servers, according to a security researcher.
The "wopbot" botnet is active and scanning the internet for vulnerable systems, including at the United States Department of Defence, chief executive of Italian security consultancy Tiger Security, Emanuele Gentili, told iTnews.
"We have found a botnet that runs on Linux servers, named “wopbot", that uses the Bash Shellshock bug to auto-infect other servers," Gentili said.


Read more: http://www.itnews.com.au/News/396197,first-shellshock-botnet-attacks-akamai-us-dod-networks.aspx#ixzz3ERtnmRhJ