Tsunami (Kaiten)
Linux DDoS backdoor
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Tsunami (Kaiten) first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Tsunami is an IRC-controlled Linux DDoS backdoor used to enlist hosts into botnets. (attributes recorded from Researchers).
Definition
Tsunami is an IRC-controlled Linux DDoS backdoor used to enlist hosts into botnets.
Overview
Tsunami is an IRC-controlled Linux DDoS backdoor used to enlist hosts into botnets.
Behavior
- IRC-controlled DDoS agent
First Seen
2002-01
Target
Linux DDoS backdoor
Malware Intelligence
Family: Tsunami (Kaiten)
Techniques: T1071, T1059
Targets: Linux DDoS backdoor
Behavior:
- IRC-controlled DDoS agent
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.