KATARU IoT Malware: Critical DDoS Threat Emerges

**KATARU IoT Malware — Executive Summary:** KATARU is an IoT-focused botnet observed after Telnet credential brute-force activity that delivers an ARM payload, attempts Linux privilege escalation (including multiple CVEs and a cgroup release_agent escape), establishes persistence across reboots, and uses encrypted C2 (X25519 + ChaCha20-Poly1305) to receive operator commands for multi-vector DDoS attacks and additional malicious actions; the report provides technical details, IoCs (hashes, filename, IP), and mitigation guidance for network segmentation, patching, credential management, and monitoring.