Researchers say, the malware is building a botnet with a current estimated 13,500 infected machines across 84 countries worldwide. Half of the infected machines are in Hong Kong, South Korea and Taiwan. The malware spreads via brute force attacks on devices with Secure Shell (SSH), a cryptographic network protocol for operating network services securely over an unsecured network. Once infected, devices communicate with the command-and-control (C2) server to inform that they are part of the botnet.
Source: https://threatpost.com/botnet-mac-android/159714/