Security researchers have discovered a malicious Java application designed to carry out DDOS (distributed denial-of-service) attacks from infected computers. Interestingly, the malicious application is written in Java, and can run on Windows, Linux , and Mac OS computers.
According to Kaspersky, the developers of the malware (HEUR:Backdoor.Java.Agent.a.) used the Zelix Klassmaster obfuscator to prevent researchers from analyzing the malware, and security applications from detecting it.
When it infects a computer, depending on the operating system, it performs certain actions to ensure that it starts at the next boot. On Windows, it modifies the registry, while on Mac OS devices, it uses the “launchd” service
On Linux machines, it adds itself to the /etc/init.d/ file.
Once it has secured its installation, the bot begins communicating with its developer via the IRC protocol.
The malware is capable of launching HTTP and UDP flood attacks. Hackers who manage it simply send a command via an IRC channel and specify the targeted IP address, port number, duration of the attack, and the number of hits to be used.
