Dorkbot
▻https://www.us-cert.gov/ncas/alerts/TA15-337A
Dorkbot is designed to steal passwords for online accounts, including social networks like Facebook and Twitter, as well as to install additional malware that can turn infected endpoints into nodes in a DDoS attack or part of a spam relay.
Dorkbot is commonly spread via malicious links sent through social networks, instant message programs or through infected USB devices.
Dorkbot is operated via IRC, and exists since 2011.
Dorkbot Botnets Get Busted (4 December 2015)
▻http://www.bankinfosecurity.com/dorkbot-ddos-botnets-get-busted-a-8728/op-1