Introduction Hajime (meaning ‘beginning’ in Japanese) is an IoT worm that was first mentioned on 16 October 2016 in a public report by RapidityNetworks. One month later we saw the first samples being uploaded from Spain to VT. This worm builds a huge P2P botnet (almost 300,000 devices at the time of publishing this blogpost), but its real purpose remains unknown. Hajime is continuously evolving, a
![Hajime, the mysterious evolving botnet](https://cdn-ak-scissors.b.st-hatena.com/image/square/e503df3bce3a10a40fd7dd787c1093cf707f9cc5/height=288;version=1;width=512/https%3A%2F%2Fmedia.kasperskycontenthub.com%2Fwp-content%2Fuploads%2Fsites%2F43%2F2017%2F04%2F07175837%2Fbotnets-featured-2.jpg)