Experts at SANS Internet Storm Center experts discovered a new Shellshock Botnet campaign that is targeting SMTP gateways worldwide. The SANS explained that the payload is an IRC Perl bot with simple DDoS commands that could be used to fetch and execute additional malicious code. The Shellshock vulnerability is continuing to create problems more than a month after it was publicly disclosed, security experts at FireEye published details on several proof-of-concept scripts which exploit the Shellshock bug. The situation is particularly critical for the Internet of Thinks devices, for which in many cases isn’t available an upgrade or it is impossible to apply any update.”]
Source: http://securityaffairs.co/wordpress/29659/cyber-crime/shellshock-smtp-botnet.html