Tengu Runs From Memory and Masquerades as systemd-journald to Hide on Linux Devices

Tengu, a modern Mirai-based malware family, is targeting poorly secured IoT and embedded Linux devices with fileless execution, encrypted command-and-control communications, and aggressive self-defense features. Security researchers identified Tengu as a distinct threat because it expands on the usual Mirai botnet model . While Mirai variants are commonly used for distributed denial-of-service attacks, Tengu can also run proxies, collect device and network data, download new…

Diamond Model