1. Symantec/
  2. Security Response/
  3. Attack Signatures/
  4. Attack: Linux.Satori Activity

Attack: Linux.Satori Activity

Severity: High

This attack could pose a serious security threat. You should take immediate action to stop any damage or prevent further damage from happening.


This signature detects Linux.Satori malware activity.

Additional Information

Linux.Satori is a worm that compromises routers and uses them to perform distributed denial of service attacks. It exploits vulnerabilities to spread to other devices over ports 37215 and 52869.


  • Various Linux platforms.


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube