Feeds

Chuck Norris botnet doesn't infect routers...

...it stares them down until they infect themselves

Protecting against web application threats using SSL

A so-called Chuck Norris botnet is hijacking poorly-configured routers and DSL modems.

According to ComputerWorld, the botnet spreads by malware that installs itself on routers and modems by guessing the default administrative password and seizing control due to many devices being configured to allow remote access.

Masaryk University's Institute of Computer Science in Brno, Czech Republic named the malware and its botnet after the American tough-guy actor and internet meme because of a comment in its source code that reads: "in nome di Chuck Norris." For those who don't parlate Italiano, that means "in the name of Chuck Norris."

Norris is best known for his martial arts prowess and round-house-kicking acumen in films like "The Way of the Dragon." He is also cited as the reason that Wally is hiding and noted for playing Russian Roulette with a full-loaded pistol and winning.

The Chuck Norris malware takes control of MIPS-based devices running the Linux operating system by launching a password-guessing dictionary and can change the DNS settings in a router. Once a router has fallen victim to Norris, the device will redirect a user to a malicious webpage that attempts to install a virus.

Once installed, the malware blocks remote communication ports and scans the network for other vulnerable systems.

The malware also exploits a known vulnerability in D-Link devices, ComputerWorld reports. D-Link Systems did not return our requests for comment

Jan Vykopal, head of the network security department with Masaryk Univerity's Institute of Computer Science, told ComputerWorld that although he doesn't know how widespread the Norris infection is, he claims to have evidence of hacked machines "spread around the world: from South America through Europe to Asia."

Because it installs on a router's RAM, Chuck Norris can be removed by restarting the device. Or perhaps that's just what he wants you to think. ®

Reducing the cost and complexity of web vulnerability management

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.