First Linux Web Server botnet discovered

Russian security researchers have discovered a Linux Web Servers botnet that uses traditional Windows botnets to spread malicious programs.

Denis Sinegubko, an independent security researcher at Magnitogorsk in Russia, pointed out that all infected machines that have been carefully checked are dedicated servers or virtual dedicated servers running legitimate websites. In addition to running Apache webserver to pass legal content, servers are also modified to run another nginx server. The port opened for spreading malicious programs is 8080 ). He said, "what we see is the first Web Server botnet. A group of infected Web servers connected to each other and a common control center participate in malicious program propagation. What makes the whole thing more complex is that the Web Server Botnet is connected to a home computer botnet ."