1. /
  2. Security Response/
  3. Linux.Psybot

Linux.Psybot

Risk Level 1: Very Low

Discovered:
March 24, 2009
Updated:
March 26, 2009 11:51:45 AM
Also Known As:
Linux/Psybot [McAfee]
Type:
Worm
Infection Length:
29,264 bytes
Systems Affected:
Linux
Linux.Psybot is a worm that spreads between embedded devices running Linux MIPS, such as routers and DSL modems.

For more information, please read the following:
Linux.Psybot—Is Your Router Secure?

Antivirus Protection Dates

  • Initial Rapid Release version March 23, 2009 revision 048
  • Latest Rapid Release version March 23, 2009 revision 048
  • Initial Daily Certified version March 23, 2009 revision 050
  • Latest Daily Certified version March 23, 2009 revision 050
  • Initial Weekly Certified release date March 25, 2009
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low
  • Payload: Spreads through routers.

Distribution

  • Distribution Level: Low
  • Ports: May lock administrative access to certain ports.
  • Target of Infection: Targets routers and DSL modems.
Note: On May 14, 2015, modifications will be made to the threat write-ups to streamline the content. The Threat Assessment section will no longer be published as this section is no longer relevant to today's threat landscape. The Risk Level will continue to be the main threat risk assessment indicator.
Writeup By: Liam O Murchu & Mario Ballano

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report