2020 Linux Malware 
Tenable
OCTOBER 22, 2024
When Bash, a command interpreter used by Unix-based systems including Linux and macOS, processed this variable, it would execute the function, but also run the arbitrary commands appended after the function definition. Shellshock” quickly became one of the most severe vulnerabilities discovered, comparable to Heartbleed’s potential impact.
Lacework
JULY 15, 2022
This ancient technique has found its place in the world of malware, namely hiding malicious code within other files including image formatted files ( T1027.003 ). General indicators and signatures for steg malware are provided in the hunting section. Steg malware is uncommon relative to other malware. Malware Details.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Prisma Clud
JUNE 22, 2023
Using WildFire in 2021 to analyze malicious files, our threat research team discovered a 73% increase in Cobalt Strike malware samples compared to 2020. The speed, volume and sophistication of modern malware attacks has made them more difficult to detect.
Lacework
APRIL 22, 2021
Sysrv-hello is a multi-architecture Cryptojacking (T1496) botnet that first emerged in late 2020, and employs Golang malware compiled into both Linux and Windows payloads. The malware is equal parts XMRig cryptominer and aggressive botnet-propagator.
Tenable
JANUARY 21, 2021
A number of threat intelligence platforms continue to report on APT groups and malware campaigns that daisy-chain vulnerabilities and weaknesses against their targets. CVE-2020-11023 , CVE-2019-11358 , CVE-2020-11022 , CVE-2015-9251. CVE-2019-17026 , CVE-2018-13379 , CVE-2020-0674, CVE-2019-9670,CVE-2019-19781, CVE-2019-11510.
O'Reilly Media - Ideas
JULY 7, 2020
Announcing Microsoft Freta — Microsoft have a service for detecting evidence of OS and sensor sabotage, such as rootkits and advanced malware, in memory snapshots of live Linux systems. eDEX-ui — a fullscreen, cross-platform terminal emulator and system monitor that looks and feels like a sci-fi computer interface.
Lacework
FEBRUARY 27, 2023
Chris Hall and Jared Stroud Cloud Security Researchers, Lacework Labs Sysrv-hello is a multi-architecture Cryptojacking (T1496) botnet that first emerged in late 2020, and employs Golang malware compiled into both Linux and Windows payloads. The malware is equal parts XMRig cryptominer and aggressive botnet-propagator.
Expert insights. Personalized for you.
77 
Let's personalize your content