Stantinko Updates: Linux Malware Impersonates Apache Web Server

The eight-year-old Stantinko botnet has updated its Linux malware - now posing as an Apache web server.

Stantinko, one of the oldest malware botnets still operating today, has rolled out updates to its class of Linux malware, upgrading its trojan to pose as the legitimate Apache web server process (httpd) in order to make detection harder on infected hosts.

The upgrades, spotted by security firm Intezer Labs, come to confirm that despite a period of inactivity in regards to code changes, the Stantinko botnet continues to operate even today.