MalwareMustDie discovered LuaBot, a trojan completely coded in Lua language that is targeting Linux platforms to recruit them in DDoS botnet. The malware was dubbed Linux/Luabot beacause it is written in the Lua programming language (version 5.3.0) and targets the Linux based systems. The bot was controlled by a C&C server hosted in the Netherlands on the infrastructure of dedicated server hosting service WorldStream.NL. The researcher also discovered a portion of code labeled as penetrate_sucuri, likely referencing the implementation of avoidance mechanism that are able to elude the Sucuri Web Application Firewall.”]
Source: http://securityaffairs.co/wordpress/51155/malware/linux-luabot.html