[Guest Diary] New Malware Libraries means New Signatures, (Fri, May 15th)

This SANS Internet Storm Center diary details a new observation of the long-running mdrfckr campaign, a Shellbot associated with the Outlaw/Dota group. The key finding is the identification of a previously undocumented version of the libssh SSH client (0.11.x) being utilized by the campaign between April 14th and April…