A hybrid DDoS botnet known for turning vulnerable Windows devices into Monero cryptomining bots is now scanning for and infecting Linux systems. While the botnet’s authors named it Satan DDoS, security researchers are calling it Lucifer to differentiate it from Satan ransomware. The new Linux version comes with capabilities similar to the Windows counterpart, including modules designed for cryptojacking and for launching TCP, UCP-based flooding attacks. The full list of DDoS attacks that can be launched using Lucifer infected devices is available in the table embedded below.
Source: https://www.bleepingcomputer.com/news/security/lucifer-cryptomining-ddos-malware-now-targets-linux-systems/