The “Lucifer” Botnet Intensifies Attacks on Apache Servers

A new version of the Lucifer botnet targets Apache Hadoop and Apache Druid big data systems. This marks a change in the botnet's tactics, possibly for a wider campaign. Lucifer, a hybrid malware, is known for DDoS attacks and crypto mining. Aqua Nautilus researchers observed over 3,000 attacks in the last month alone. The campaign unfolds in three phases, indicating testing of evasion techniques.