Cybersecurity researchers have noticed a brand new Linux malware downloader that targets poorly defended Linux servers with cryptocurrency miners and DDoS IRC bots.

Researchers from ASEC found the assault after the Shell Script Compiler (SHC) used to create the downloader was uploaded to VirusTotal. Apparently, Korean customers had been those importing the SHC, and it’s Korean customers who’re targets, as effectively.

Additional evaluation has proven that the menace actors are going after poorly defended Linux servers, brute-forcing their method into administrator accounts over SSH. 

Mining Monero

As soon as they make their method in, they’ll both set up a cryptocurrency miner, or a DDoS IRC bot. The miner being deployed is XMRig, arguably the preferred cryptocurrency miner amongst hackers. It makes use of the computing energy of a sufferer’s endpoints (opens in new tab) to generate Monero, a privacy-oriented cryptocurrency whose transactions are seemingly inconceivable to trace, and whose customers are allegedly inconceivable to establish.

For the DDoS IRC bot, the menace actors can use it to run instructions resembling TCP Flood, UDP Flood, or HTTP Flood. They will run port scanning, Nmap scanning, kill numerous processes, clear up the logs, and extra.

“Due to this, directors ought to use passwords which are tough to guess for his or her accounts and alter them periodically to guard the Linux server from brute pressure assaults and dictionary assaults, and replace to the newest patch to stop vulnerability assaults,” ASEC mentioned in its report.

“Directors also needs to use safety packages resembling firewalls for servers accessible from outdoors to limit entry by attackers.”

Linux programs are being continually bombarded with malicious deployments, most frequently ransomware and cryptojacking. 

A VMware report from February 2022 mentioned the continued success of Linux companies within the digital infrastructure and cloud industries, in addition to the truth that most anti-malware and cybersecurity options are targeted on defending Home windows-based gadgets, put Linux on skinny ice.

• This is our listing of the most effective antivirus software program 

Through: BleepingComputer (opens in new tab)