Linux routers in Japan are the target of a new Golang remote access trojan (RAT) called GobRAT. "Initially, the attacker targets a router whose WEBUI is open to the public, executes scripts possibly by using vulnerabilities, and finally infects the GobRAT," the JPCERT Coordination Center (JPCERT/CC) said in a report published today. . The compromise of an internet-exposed router is followed by the deployment of a loader script that acts as a conduit for delivering GobRAT, which, when launched, masquerades as the Apache daemon process (apached) to evade detection. The loader is also equipped to disable firewalls, establish persistence using the cron job scheduler, and register an SSH public key in the .ssh/authorized_keys file for remote access. GobRAT, for its part, communicates with a remote server via the Transport Layer Security ( TLS ) protocol to receive as many as 22 different encrypted commands for execution. The link for this article located at The Hacker News is no longer available. . Infiltration of unsecured wireless devices results in the spread of Raccoon Stealer malware throughout the United States.. Remote Access Trojan, Linux Router Attack, GobRAT Malware, Cyber Threat Japan, Golang Trojan. . LinuxSecurity.com Team
Google has taken the unprecedented step of warning millions of users whose PCs it believes are infected with fake security software and other malware, the company said yesterday. But some security experts are leery of Google's move.. The warning appears as a bright yellow banner that reads "Your computer appears to be infected," at the top of the page after users conduct a search with Google. Google has started to slap this warning at the top of its search results when it suspects that the PC is infected with malware. The link for this article located at Network World is no longer available. . Google has issued a cautionary message to users regarding the risk of malware infections on their PCs. This warning raises significant implications and concerns surrounding online security.. Google Alerts, Malware Threats, User Safety, Infection Protection. . Anthony Pell
It has emerged in the last week that another of those rare Linux viruses may be on the loose. And this one has strong similarities to October's Remote Shell Trojan (RST) that was largely dismissed by the Linux community. In a . . . . It has emerged in the last week that another of those rare Linux viruses may be on the loose. And this one has strong similarities to October's Remote Shell Trojan (RST) that was largely dismissed by the Linux community. In a posting to a security mailing list at the end of December, SecurityFocus brought 'RST.b' to the internet community's attention. The researchers warned that the culprit carrying the virus is likely to be "some exploit being passed around, possibly a Secure Shell one". Linux users are advised not to run exploits from unknown sources. The link for this article located at vnunet is no longer available. . Alerted by recent findings, experts warn of a novel Linux malware akin to the Remote Shell Trojan, advising users to remain vigilant.. Linux Malware, Shell Exploit Warning, Linux Security Threats. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.