Skip to main content

This new Linux malware floods machines with cryptominers and DDoS bots

Cybersecurity researchers have spotted a new Linux malware downloader that targets poorly defended Linux servers with cryptocurrency miners and DDoS IRC bots.

Researchers from ASEC discovered the attack after the Shell Script Compiler (SHC) used to create the downloader was uploaded to VirusTotal. Apparently, Korean users were the ones uploading the SHC, and it’s Korean users who are targets, as well.

Further analysis has shown that the threat actors are going after poorly defended Linux servers, brute-forcing their way into administrator accounts over SSH. 

Mining Monero

Once they make their way in, they’ll either install a cryptocurrency miner, or a DDoS IRC bot. The miner being deployed is XMRig, arguably the most popular cryptocurrency miner among hackers. It uses the computing power of a victim's endpoints to generate Monero, a privacy-oriented cryptocurrency whose transactions are seemingly impossible to track, and whose users are allegedly impossible to identify.

For the DDoS IRC bot, the threat actors can use it to run commands such as TCP Flood, UDP Flood, or HTTP Flood. They can run port scanning, Nmap scanning, kill various processes, clean up the logs, and more.

"Because of this, administrators should use passwords that are difficult to guess for their accounts and change them periodically to protect the Linux server from brute force attacks and dictionary attacks, and update to the latest patch to prevent vulnerability attacks," ASEC said in its report.

"Administrators should also use security programs such as firewalls for servers accessible from outside to restrict access by attackers."

Linux systems are being constantly bombarded with malicious deployments, most often ransomware and cryptojacking. 

A VMware report from February 2022 said the continued success of Linux services in the digital infrastructure and cloud industries, as well as the fact that most anti-malware and cybersecurity solutions are focused on protecting Windows-based devices, put Linux on thin ice.

Via: BleepingComputer



Source: TechRadar

Popular posts from this blog

Android 12 will bring the end of third-party share menus

Apps like Sharedr will no longer be able to replace the default share dialog. What you need to know Third-party apps will not be allowed to replace the Android share menu in Android 12. You will no longer be able to set apps like Sharedr as the default. Google says it never intended to allow third-party apps to replace the official Sharesheet. One of Android 12 's biggest highlights is the new Material You design language, which brings major changes to nearly every key UI component. Android 12 will also introduce a major change to the way users share links and photos, according to a report from XDA Developers . On Android 11 , Google allows third-party apps and OEMs to fully customize the Android Sharesheet, which is the reason why the share dialog differs from one app to another. It is even possible to completely bypass the official Android Sharesheet by setting an app like Sharedr as the default Sharesheet. In addition to providing a more consistent experience, Sharedr

The new Amazon Fire HD 10 is growing into a viable productivity tablet

An already good entertainment device finally gets productive. Amazon has been busy churning out a whole host of new devices and upgrades to existing devices over the past several months. Earlier this year, I reviewed the excellent Echo Buds (2nd Gen) , and even the fantastic Echo Frames (2nd Gen), have since been updated to include options with sunglass and blue light filtering lenses . In early May, we also learned that Amazon was refreshing the Echo Show 5 and Echo Show 8 and that it was even rolling out its first Echo Show for kids . While newer and more novel products like the ones mentioned above often see a faster update cycle, more mature devices like Kindle e-readers and Fire tablets go longer between new versions. In fact, the last update to the Fire HD 10 line was back in 2019, so, understandably, Amazon was ready to reinvigorate its flagship tablet. Not only did it update the specs and colors on the Fire HD 10, but it also gave us a second version in the Fire HD 10 Plu

Wondershare Photo Collage Studio

Wondershare Photo Collage Studio Studio integrated workshop create albums of your digital photos Yes with this program you can create Albums wonderful from your digital photos and keep them you can create albums stunning so wonderful additions distinctive not imagine it The program supports hundreds of templates and frameworks that can be used during the creation of your album from your digital photos and keep your album in a computer Create beautiful albums and you can add a lot through this program distinctive and you can with this program, add effects beautiful and can set the time to add effects and allows you to program import all image formats and also features a unique interface easier for the professional user and the novice to use this program if you want to view images through your computer, this program will add a great aesthetic touch to browse your photos through this program is a wonderful experience import all image formats

Save $30 on Echo Dot (3rd Gen) Kids Edition

Echo Dot (3rd Gen) Kids Edition Echo Dot (3rd Gen) Kids Edition, an Echo designed for kids with parental controls - Blue List Price: $69.99 With Deal: $39.99 You Save: $30.00 (43%) Designed with kids in mind - They can ask Alexa to play music, hear stories, call approved friends and family, and explore a world of kid-friendly skills. Buy from USA Buy from UK .