Alex Turing. (2021, May 6). RotaJakiro, the Linux version of the OceanLotus. Retrieved June 14, 2023.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1036.005 Match Legitimate Resource Name or Location |
MalwareRotaJakiro | RotaJakiro has used the filename `systemd-daemon` in an attempt to appear legitimate. |
| T1095 Non-Application Layer Protocol |
MalwareRotaJakiro | RotaJakiro uses a custom binary protocol using a type, length, value format over TCP. |
| T1571 Non-Standard Port |
MalwareRotaJakiro | RotaJakiro uses a custom binary protocol over TCP port 443. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
