Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
A new Linux malware developed using the shell script compiler has been observed deploying a cryptocurrency miner on compromised systems. . "It is presumed that after successful authentication through a dictionary attack on inadequately managed Linux SSH servers, various malware were installed on the target system," AhnLab Security Emergency Response Center (ASEC) said in a report published today. shc allows shell scripts to be converted directly into binaries, offering protections against unauthorized source code modifications. It's analogous to the BAT2EXE utility in Windows that's used to convert any batch file to an executable. In an attack chain detailed by the South Korean cybersecurity firm, a successful compromise of the SSH server leads to the deployment of an shc downloader malware along with a Perl-based DDoS IRC Bot. The link for this article located at The Hacker News is no longer available. . Cybercriminals are leveraging shc-encoded Linux malware to deploy crypto mining software on vulnerable machines through SSH vulnerabilities.. Linux Malware, Cryptocurrency Exploit, Shell Script Attack. . LinuxSecurity.com Team
How cool is this. "This is a program for encrypting/decrypting streams of data using Rijndael and Cipher Block Feedback mode (CFB-128). Encrypt/decrypt stdin using the Advanced Encryption Standard winner "Rijndael" encryption algorithm in Cipher Block Feedback (stream) mode. Uses /dev/urandom to . . . . How cool is this. "This is a program for encrypting/decrypting streams of data using Rijndael and Cipher Block Feedback mode (CFB-128). Encrypt/decrypt stdin using the Advanced Encryption Standard winner "Rijndael" encryption algorithm in Cipher Block Feedback (stream) mode. Uses /dev/urandom to create a salt. Prepends the output stream with salt when encrypting, strips it off when decrypting." The link for this article located at aescrypt.sourceforge.net/ is no longer available. . AESCrypt employs the Rijndael algorithm to safeguard sensitive data in shell scripts from unauthorized access, utilizing symmetric key cryptography for files and passwords.. Rijndael Encryption, Shell Script Security, Data Protection, Stream Mode Encryption. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.