Skip to content
CyberWire Daily

Xwo scans for default credentials and exposed web services. [Research Saturday]

Jun 8, 2019 · 16 min · Season 3 · Episode 89
0:00-16:38

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

Researchers at AT&T Alien Labs have been tracking a new malware family they've named "Xwo" that's scanning systems for default credentials and vulnerable web services. 

Tom Hegel is security researcher with AT&T Alien Labs, and he share their findings.

The original research is here:

https://www.alienvault.com/blogs/labs-research/xwo-a-python-based-bot-scanner