Microsoft se penche sur XorDdos, cheval de Troie Linux qui cible l’IoT et Docker

Il faudra m’expliquer comment

"Defenders can apply the following mitigations to reduce the impact of this threat:



Encourage the use of Microsoft Edge—available on Linux and various platforms—or other web browsers that support Microsoft Defender SmartScreen, which identifies and blocks malicious websites, including phishing sites, scam sites, and sites that contain exploits and host malware.

Use device discovery to find unmanaged Linux devices on your network and onboard them to Microsoft Defender for Endpoint. 

Turn on cloud-delivered protection in Microsoft Defender Antivirus or the equivalent for your antivirus product to use cloud-based machine learning protections that can block a huge majority of new and unknown variants. 

Run EDR in block mode so that Microsoft Defender for Endpoint can block malicious artifacts, even when your non-Microsoft antivirus doesn’t detect the threat or when Microsoft Defender Antivirus is running in passive mode.

Enable network protection to prevent applications or users from accessing malicious domains and other malicious content on the internet. 

Enable investigation and remediation in full automated mode to allow Microsoft Defender for Endpoint to take immediate action on alerts to resolve breaches, significantly reducing alert volume. "

permet de lutter contre

"XorDdos is known for using Secure Shell (SSH) brute force attacks to gain remote control on target devices."

La logique m’échappe.

J’arrive pas à inclure la première ligne de la première citation dans l’encadré noir.
La 2ème citation ne veut rien savoir non plus.