Linux users targeted by mystery drive-by rootkit