EBURY BOTNET INFECTED 400K LINUX SERVERS SINCE 2009

Summary from the TLDR InfoSec newsletter

The Ebury botnet has compromised 400K servers over the past 15 years. Recent attacks show that operators have been targeting hosting providers to perform supply-chain attacks on clients renting virtual servers. The Ebury operators are financially motivated and often deploy credential stealers onto compromised servers.