South Korean cybersecurity firm AhnLab Security Emergency Response Center said it has observed a new Linux malware in the wild that deploys a cryptocurrency miner on infiltrated systems using a shell script compiler downloader, reports The Hacker News. According to the report, a successful breach will be followed by execution of the shc downloader malware to fetch the XMRig cryptocurrency miner software and a Perl-based DDoS IRC Bot that allows the attacker to connect through a remote server and proceed to mount distributed denial-of-service attacks. . "It is presumed that after successful authentication through a dictionary attack on inadequately managed Linux SSH servers, various malware were installed on the target system. This bot supports not only DDoS attacks such as TCP flood, UDP flood, and HTTP flood, but various other features including command execution, reverse shell, port scanning, and log deletion," researchers said. The link for this article located at SC Media is no longer available. . Recent findings indicate a new strain of Linux malware that installs a cryptocurrency miner and initiates DDoS attacks following SSH compromises, preying on inadequately protected servers.. Linux Malware,Cryptocurrency Threat,DDoS Attack,SSH Security,AhnLab Report. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.