Language Selection

English French German Italian Portuguese Spanish

Linux users targeted by mystery drive-by rootkit

Filed under
Linux
Security

Security researchers have discovered what appears to be an experimental Linux rootkit designed to infect its highly select victims during a classic drive-by website attack.

Posted anonymously to Full Disclosure on 13 November by an annoyed website owner, the rootkit has since been confirmed by CrowdStrike and Kaspersky Lab as being distributed to would-be victims via an unusual form of iFrame injection attack.

Aimed specifically at users of the latest 64-bit Debian Squeezy kernel (2.6.32-5), the rootkit has been dubbed ‘Rootkit.Linux.Snakso.a’ by Kaspersky Lab.

rest here




More in Tux Machines

Type Title Author Replies Last Postsort icon
Story FreeBSD-Based TrueOS Operating System Gets New Jail Tools, Automounting Feature Rianne Schestowitz 27/02/2017 - 12:47am
Story Calamares 3.1 Distribution-Independent Linux Installer Officially Released Rianne Schestowitz 27/02/2017 - 12:46am
Story Reiser4 Updated For The Linux 4.10 Kernel Rianne Schestowitz 27/02/2017 - 12:44am
Story Voyager 9 Linux Distro Enters Development, Now Based on Debian 9 "Stretch" Rianne Schestowitz 27/02/2017 - 12:40am
Story Black Lab Linux Gets First Weekly ISOs, Adds Linux Kernel 4.8 from Ubuntu 16.10 Rianne Schestowitz 27/02/2017 - 12:38am
Story Games for GNU/Linux Rianne Schestowitz 26/02/2017 - 10:08pm
Story Linux 4.9.13 Rianne Schestowitz 26/02/2017 - 6:11pm
Story OSS Leftovers Rianne Schestowitz 26/02/2017 - 6:07pm
Story today's howtos Roy Schestowitz 26/02/2017 - 4:12pm
Story UKSM Is Still Around For Data Deduplication Of The Linux Kernel Roy Schestowitz 26/02/2017 - 4:09pm