Chuck Norris Attacks Linux-Based Routers, Modems

angry tapir writes "Discovered by Czech researchers, the Chuck Norris botnet has been spreading by taking advantage of poorly configured routers and DSL modems. The malware got the Chuck Norris moniker from a programmer's Italian comment in its source code: 'in nome di Chuck Norris,' which means 'in the name of Chuck Norris.' Chuck Norris is unusual in that it infects DSL modems and routers rather than PCs. It installs itself on routers and modems by guessing default administrative passwords and taking advantage of the fact that many devices are configured to allow remote access."

Comments

As far as misleading headlines go

[DavidR1991]

this one really takes the cake!

Re:As far as misleading headlines go

[somersault]

Actually, I think Chuck Norris would take the cake and use it to asphyxiate the headline, before drop-kicking said headline into the sun.

Re:As far as misleading headlines go

[suso]

Yes, this is very misleading. I thought that maybe the Linux network stack was suddenly vulnerable or something, but you're just talking about it taking advantage of default passwords, which is pretty old if you ask me.

This doesn't necessarily mean that say a Linux router that was installed on PC class hardware and has been kept up to date and properly secured is vulnerable to this botnet.

Re:As far as misleading headlines go

[Anonymous Coward]

I've also got to question the sense of naming a botnet like this. Sure it's memorable, but what's to stop Chuck Norris from taking legal action against the researchers who coined the name? I certainly wouldn't want my name associated with a criminal enterprise.

...Chuck Norris is a fictional charactor...

Re:As far as misleading headlines go

[spartacus_prime]

Actually, I think Chuck Norris would take the cake and use it to asphyxiate the headline, before roundhouse kicking said headline into the sun.

Fixed that for you.

Re:As far as misleading headlines go

[Dunbal]

Amazing how posts get modded insightful even though they take no time to explain their possition.

      The mod system shares the same flaw as democracy: Morons also have a vote.

Re:As far as misleading headlines go

[andi75]

If you really screwed up moderating, just post a reply in the same thread, that will undo all your moderations.

Re:As far as misleading headlines go

[ooshna]

...Chuck Norris is a fictional charactor...

Thats what they said about the fist in his beard

Is anything

[AllyGreen]

safe from Chuck Norris??

Re:Is anything

[hvm2hvm]

If Chuck Norris ever fights himself (like if he goes back in time) he will win. End of story.

the REAL Chuck Noris

[bsDaemon]

The REAL Chuck Noris wouldn't have to guess the default password, he'd just round-house kick the modem until it let him in without it.

Re:the REAL Chuck Noris

[Anonymous Coward]

There is no password behind Chuck Norris' router, there is only another fist.

Re:the REAL Chuck Noris

[L4t3r4lu5]

Chuck Norris has no need of a router. He simply stares at an inexpensive hub until it starts packet switching out of fear.

His last hub was only rebooted once. Rebooted into the sun.

Re:I wonder

[MustardAndPizza]

Duh! Very small rocks.

non Linux based routers

[viralMeme]

'It installs itself on routers and modems by guessing default administrative passwords and taking advantage of the fact that many devices are configured to allow remote access."'

Does this botnet attack also work on non Linux based routers and if so the what is the logic behind the subject line ?

Re:non Linux based routers

[Flibberdy]

'It installs itself on routers and modems by guessing default administrative passwords and taking advantage of the fact that many devices are configured to allow remote access."' Does this botnet attack also work on non Linux based routers and if so the what is the logic behind the subject line ?

No, It requires the router to be running Linux on a MIPS system.

Re:non Linux based routers

[Nursie]

Apparently the nintendo DS, unless some sort of update has been released, only does WEP.

This is not a good thing.

Re:non Linux based routers

[morgan_greywolf]

Not so.

For example, some Linksys routers run Linux, but others run a proprietary VxWorks-based OS. They're all, to my knowledge, based on MIPS processors.

Re:And will the Bruce Lee Bot Net be fighting it?

[Xemu]

Will it be involved in some botnet tournament, fighting over Linksys, D-Link and Netgear routers in a winner takes all competition?

That would be the "Highlander" botnet

Re:Stupid jokes incoming in 3...2...1...

[krou]

The malware got the Chuck Norris moniker from a programmer's Italian comment in its source code: 'in nome di Chuck Norris,' which means 'in the name of Chuck Norris.'

In other news, an Italian programmer was found dead after taking Chuck Norris's name in vain.

Wow, wasn't aware Chuck Norris was a botnet

[knewter]

Am I the only one who was entirely terrified by this headline?

Try lack of jurisdiction

[damn_registrars]

what's to stop Chuck Norris from taking legal action against the researchers who coined the name?

International boundaries, for one. Likely the author of the software for the botnet does not reside in the US (if that person's location is even known). Chuck Norris can take all the legal action he wants within the US against the botnet author or botnet master, it generally won't mean squat if they are in a different country.

Re:Try lack of jurisdiction

[cbiltcliffe]

Despite *our* ability to easily determine that the name has little to actually do with Chuck Norris, a less informed individual wouldn't be able to.

And that is exactly the problem with the legal system.

Since when is it my responsibility to make sure you're educated in all the correct fields so that you don't get offended, or misinterpret something I say?

The fact that someone who's not informed could misunderstand me should not be able to present me with any legal problems at all.

Unfortunately, it does, because the system sucks.

Re:Stupid jokes incoming in 3...2...1...

[rubycodez]

...with the impression of a foot in the side of his head

Chuck Norris will want Forced Vengeance (1982)...

[saboola]

..I can not merely see him suffering Silent Rage (1982) over having a botnet named after him. He will attempt to get the researcher in a legal Code of Silence (1985) using A Force of One (1979) lawyer who will no doubt be Top Dog (1995) in his field.