XorDdos depicts the trend of malware increasingly targeting Linux-based operating systems, which are commonly deployed on cloud infrastructures and Internet of Things (IoT) devices. First discovered in 2014 by the research group MalwareMustDie, XorDdos was named after its denial-of-service-related activities on Linux endpoints and servers as well as its usage of XOR-based encryption for its communications. In the last six months, we observed a 254% increase in activity from a Linux trojan called XorDdos. Microsoft Purview Data Lifecycle Management.Microsoft Purview Information Protection.Information Protection Information Protection.Microsoft Purview Communication Compliance.Microsoft Purview Insider Risk Management.