Okiru ARC-Processor Targeting Register

PROBLEM: On January 14, 2018, researchers found the Okiru variant of Mirai — the first to target ARC-processor Linux devices, alongside ARM, MIPS, x86, and PowerPC. Clone botnets expand to new chip architectures faster than compliance lists update, so whole device classes stay unmonitored until they are already infected.

SOLUTION: An IBM Cloud Ideas compliance improvement that maintains an architecture-targeting register: every processor architecture a botnet family is observed attacking, the date it first appeared, and the device classes affected, so compliance coverage follows the clone lineage onto new hardware instead of lagging it.

EVIDENCE BASIS: DOCUMENTED — Okiru variant found January 14, 2018; first Mirai variant targeting ARC-processor Linux devices; also targets ARM, MIPS, x86, and PowerPC.