Devnull
Template:Short description Script error: No such module "For". Script error: No such module "Unsubst". Devnull is a computer worm for the Linux operating system that was named after <templatestyles src="Mono/styles.css" />/dev/null, Unix's null device. This worm was found on 30 September 2002.
This worm, once the host has been compromised, downloads and executes a shell script from a web server. This script downloads a gzipped executable file named <templatestyles src="Mono/styles.css" />k.gz from the same address, and then decompresses and runs the file.
This downloaded file appears to be an IRC client. It connects to different channels and waits for commands to process on the infected host.
Then the worm checks for presence of the GCC compiler on the local system and, if found, creates a directory called <templatestyles src="Mono/styles.css" />.socket2. Next, it downloads a compressed file called <templatestyles src="Mono/styles.css" />devnull.tgz. After decompressing, two files are created: an ELF binary file called <templatestyles src="Mono/styles.css" />devnull and a source script file called <templatestyles src="Mono/styles.css" />sslx.c. The latter gets compiled into the ELF binary <templatestyles src="Mono/styles.css" />sslx.
The executable will scan for vulnerable hosts and use the compiled program to exploit a known OpenSSL vulnerability.Script error: No such module "Unsubst".