Gafgyt (BASHLITE)
IoT DDoS botnet
Source Attribution
- Origin
- MITRE
- Source
- Akamai research
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Akamai research · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Gafgyt (BASHLITE) first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Gafgyt/BASHLITE builds IoT DDoS botnets by scanning for default-credential devices. (attributes recorded from Akamai research).
Definition
Gafgyt/BASHLITE builds IoT DDoS botnets by scanning for default-credential devices.
Overview
Gafgyt/BASHLITE builds IoT DDoS botnets by scanning for default-credential devices.
Behavior
- Scan + exploit IoT credentials
First Seen
2014-08
Target
IoT DDoS botnet
Malware Intelligence
Family: Gafgyt (BASHLITE)
Techniques: T1071, T1059
Targets: IoT DDoS botnet
Behavior:
- Scan + exploit IoT credentials
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.