Hajime (malware)

Hajime is a worm according to sources which have placed research on the subject.{{cite web |url= http://news.softpedia.com/news/iot-malware-hajime-fights-against-mirai-tries-to-secure-devices-515037.shtml |title= IoT Malware Hajime Fights Against Mirai, Tries to Secure Devices |publisher= Softpedia |date= April 21, 2017 |accessdate= 13 October 2017 |author= Vatu, Gabriela}}

It appears to have been discovered as early as October 2016.{{cite web |url= http://news.softpedia.com/news/vigilante-iot-worm-hajime-infects-300-000-devices-515233.shtml |title= Vigilante IoT Worm Hajime Infects 300,000 Devices |publisher= Softpedia |date= April 27, 2017 |accessdate= 13 October 2017 |author= Vatu, Gabriela}}

Later in April 2017, Hajime generated large media coverage as it appeared to be in competition with Mirai.{{cite web |url= https://threatpost.com/mirai-and-hajime-locked-into-iot-botnet-battle/125112/ |title= Mirai and Hajime Locked Into IoT Botnet Battle |publisher= threatpost |date= April 21, 2017 |accessdate= 13 October 2017 |author= Spring, Tom}}

This led to a number of reports which compared and noted that it appeared to have a similar purpose to Linux.Wifatch.{{cite web |url= https://www.bleepingcomputer.com/news/security/vigilante-hacker-uses-hajime-malware-to-wrestle-with-mirai-botnets/ |title= Vigilante Hacker Uses Hajime Malware to Wrestle with Mirai Botnets |publisher= Bleeping Computer |date= April 19, 2017 |accessdate= 13 October 2017 |author= Cimpanu, Catalin}}

It also did not contain any modules or tools for denial of service attacks, but instead only contained methods for extending its reach.{{cite web |url= https://www.scmagazineuk.com/hajime-malware-now-has-300000-strong-botnet-at-disposal-say-researchers/article/653516/ |title= Hajime malware now has 300,000 strong botnet at disposal say researchers |publisher= scmagazineuk.com |date= April 28, 2017 |accessdate= 13 October 2017 |author= Millman, Rene}}

Hand written assembly code specifically for several platforms was also discovered by researchers as well.{{cite web |url= https://security.rapiditynetworks.com/publications/2016-10-16/hajime.pdf |title= Hajime: Analysis of a decentralized intern et worm for IoT devices |publisher= rapiditynetworks.com |date= 16 October 2016 |accessdate= 14 October 2017 |author= Edwards, Sam |author2= Profetis, Ioannis |archive-date= 30 December 2016 |archive-url= https://web.archive.org/web/20161230182045/https://security.rapiditynetworks.com/publications/2016-10-16/hajime.pdf |url-status= dead }}

Hajime is similar to Mirai in its method of how it manages to compromise systems.{{cite web |url= http://www.securityweek.com/white-hat-hacker-created-mysterious-iot-worm-symantec-says |title= White Hat Hacker Created Mysterious IoT Worm, Symantec Says |publisher= securityweek.com |date= April 20, 2017 |accessdate= 14 October 2017 |author= Arghire, Ionut}}

One of the key differences with Mirai is that it uses a peer-to-peer network for communications.{{cite web |url= https://thehackernews.com/2017/04/vigilante-hacker-iot-botnet_26.html |title= Hajime 'Vigilante Botnet' Growing Rapidly; Hijacks 300,000 IoT Devices Worldwide |publisher= thehackernews.com |date= April 26, 2017 |accessdate= 14 October 2017 |author= Khandelwal, Swati}}{{cite news |title=Hajime, the mysterious evolving botnet |url=https://securelist.com/hajime-the-mysterious-evolving-botnet/78160/ |work=securelist.com |date=25 April 2017}}

What was also noted was the message the malware left on systems it compromised.{{cite web |url= https://security.radware.com/ddos-threats-attacks/hajime-iot-botnet/ | title=Hajime Botnet – Friend or Foe? |publisher= radware.com |date= 26 April 2017 |accessdate= 14 October 2017}}

The message left on systems compromised by Hajime displayed on terminals is shown below.{{cite web |url= https://thehackernews.com/2017/04/vigilante-hacker-iot-botnet.html |title= To Protect Your Devices, A Hacker Wants to Hack You Before Someone Else Does |publisher= thehackernews.com |date= April 19, 2017 |accessdate= 14 October 2017 |author= Khandelwal, Swati}}

• BASHLITE – another notable IoT malware
• Denial-of-service attack
• Linux malware
• Linux.Darlloz – another notable IoT malware
• Remaiten - another IoT DDoS bot

{{reflist|35em}}

{{IoT Malware}}

{{Hacking in the 2010s}}

Category:Botnets

Category:IoT malware

Category:Linux malware

Category:Cybercrime in India