SophosLabs has detected a new DDoS botnet targeting poorly secured SSH servers. Called Chalubo (or ChaCha-Lua-bot) in honour of its use of the ChaCha stream cipher, the malware started circulating in August before seeing an activity spike in early September.
Read full news article on Naked Security