A new DDoS botnet propagates via the Android Debug Bridge and uses Tor to hide its activity. Matryosh is recycling the Mirai malware framework and is now targeting Android devices in order to launch distributed denial-of-service (DDoS) attacks. The botnet uses the Tor network to cloak its malicious activity and prevent command server takedowns. Researchers say the new botnet is only one of many recent strains to surface, which over the past years have included Kaiji, DarkNexus, DarkGnet and DDGnet.
Source: https://threatpost.com/android-devices-prone-to-botnets-ddos-onslaught/163680/