Linux

Watchbog Exploits Jira and Exim Vulnerabilities to Infect Linux Servers With Cryptocurrency Miner

July 26, 2019

Threat actors are targeting Linux servers with vulnerable software, namely the project management tool Jira and the message transfer agent Exim, using a variant of the Watchbog trojan, which drops a Monero miner to expand their botnet.

eCh0raix Ransomware Found Targeting QNAP Network-Attached Storage Devices
July 11, 2019
A newly uncovered ransomware family was found targeting QNAP network-attached storage (NAS) devices. Named eCh0raix, the malware was reportedly designed for targeted ransomware attacks.
Read more
HiddenWasp Malware Targets Linux Systems, Borrows Code from Mirai, Winnti
May 31, 2019
Security researchers uncovered a new malware targeting Linux systems: HiddenWasp. Learn its backdoor and rootkit capabilities — and how users and organizations can defend against this threat.
Read more
NamPoHyu aka MegaLocker Virus Ransomware Found Remotely Encrypting Samba Servers
April 18, 2019
A ransomware family was recently spotted targeting vulnerable Samba servers: NamPoHyu Virus aka MegaLocker Virus. NamPoHyu Virus searches for publicly accessible Samba servers, brute-forces them, and runs the ransomware locally to encrypt the exposed servers.
Read more
Cryptocurrency-mining Malware Targets Linux Systems, Uses Rootkit for Stealth
November 08, 2018
We recently encountered a cryptocurrency-mining malware affecting Linux systems. It is notable for being bundled with a rootkit component that hides the malicious process’ presence from monitoring tools.
Read more
Erebus Linux Ransomware: Impact to Servers and Countermeasures
June 15, 2017
A South Korean web hosting company was hit by a Linux version of the Erebus ransomware. Here’s what you need to know about the threat and what sysadmins can do to defend against it.
Read more
Linux Security: A Closer Look at the Latest Linux Threats
September 13, 2016
A rundown of the latest wave of threats targeting Linux systems.
Read more
Mumblehard Botnet That Targeted Linux Systems Has Been Shut Down
April 11, 2016
Mumblehard, a botnet that targets servers running Linux has been shut down a year after it was first discovered.
Read more
Linux Mint Website Hacked; ISO Downloads Replaced with a Backdoor
February 22, 2016
The Linux Mint website has been hacked and was found to be pointing to malicious ISOs that contained an IRC bot. What happened and who is affected?
Read more
Linux Flaw Affects Linux PCs, Servers, and Devices Running Android KitKat 4.4
January 21, 2016
A previously undiscovered flaw in the Linux kernel that affects “tens of millions” of Linux PCs and servers has been found.
Read more