| Name: | Lion |
| Aliases: | The Lion worm, Linux/Lion, 1i0n, |
| Ports: | 53, 1008, 2555, 10008, 27374, 33567, 33568, 60008 |
| Files: | Lion.tgz - 860,160 bytes Lion.tgz - 61,440 bytes Lion.tgz - 71,680bytes 1i0n.sh - Getip.sh - Star.sh - Scan.sh - Randb - Pscan -Hack.sh - Bindx.sh - Bind - Ssh - Login - |
| Created: | 2001 |
| Requires: | |
| Actions: | Worm / Steals passwords / Rootkit dropper / Hacking tool |
| Lion compromises Linux systems and installs The t0rn rootkit andthe DDoS trojan TFN 2k. As of now their exists three different versions ofthe worm. | |
| Versions: | |
| Registers: | |
| Notes: | Works on Unix (Linux). |
| Country: | written in China |
| Program: |