Hosted on MSN

I tore apart the most common Linux malware in a sandbox, and it uses layer after layer of tricks to survive

There's a common misconception that Linux is somehow immune to malware. It's not hard to see why people think that; Linux's market share on the desktop is small, and the kind of people who run Linux ...
Ars Technica

North Korean hackers use newly discovered Linux malware to raid ATMs

In the beginning, North Korean hackers compromised the banking infrastructure running AIX, IBM’s proprietary version of Unix. Next, they hacked infrastructure running Windows. Now, the state-backed ...
techtarget

Cryptomining perfctl malware swarms Linux machines

A cryptomining malware dubbed perfctl has infected thousands of Linux machines in the last few years. Researchers at cloud security vendor Aqua Security say it has the potential to impact many more.
Bleeping Computer

Researchers discover first UEFI bootkit malware for Linux

The first UEFI bootkit specifically targeting Linux systems has been discovered, marking a shift in stealthy and hard-to-remove bootkit threats that previously focused on Windows. Named 'Bootkitty,' ...
CSOonline

VoidLink malware was almost entirely made by AI

Check Point Research says the Linux malware framework was authored largely through AI-driven processes, lowering the barrier to producing complex threats. VoidLink, the high-impact Linux malware ...
TechRepublic

AI Turns Panda Image Into ‘New Breed of Persistent Malware’

AI-assisted malware named Koske is hidden inside panda images, silently hijacking Linux machines for crypto mining while evading detection. Hackers are embedding AI-generated malware hidden inside ...
Infosecurity-magazine.com

DaggerFly-Linked Linux Malware Targets Network Appliances

A new malware strain, ELF/Sshdinjector.A!tr, has been linked to the DaggerFly espionage group and used in the Lunar Peek campaign to target Linux-based network appliances. Its primary function is data ...
TMCnet

Linux Malware ‘Plague’ Hides in Plain Sight, Bypasses Antivirus and Authentication Controls

A newly discovered Linux backdoor called Plague evades detection by traditional antivirus tools. It embeds itself in the system’s PAM (Pluggable Authentication Module) to bypass SSH login security.
Dark Reading

Stealthy Linux 'Auto-color' Backdoor Paints US Institutions With Malware

Attackers are wielding a novel Linux backdoor against the education and public sectors in the US and Asia that demonstrates particularly stealthy ways to avoid both detection and deletion from a ...
Bleeping Computer

Chinese hackers target Linux with new WolfsBane malware

A new Linux backdoor called 'WolfsBane' has been discovered, believed to be a port of Windows malware used by the Chinese 'Gelsemium' hacking group. ESET security researchers who analyzed WolfsBane ...
techtarget

Malware Forensics Field Guide for Linux Systems: Digital Forensics Field Guides

Employing a methodical approach to examining areas of the compromised system that are most likely to contain traces of malware installation and use increases the chances that all traces of a ...