New HiddenWasp malware found targeting Linux systems

guest · May 29, 2019

New HiddenWasp malware found targeting Linux systems
Malware believed to have been created by Chinese hackers
May 29, 2019
https://www.zdnet.com/article/new-hiddenwasp-malware-found-targeting-linux-systems/

Named HiddenWasp, this malware is composed of a user-mode rootkit, a trojan, and an initial deployment script.
The malware has a similar structure to another recently-discovered Linux malware strain -- the Linux version of Winnti, a famous hacking tool used by Chinese state hackers.
COPY-PASTE JOB? CHINESE ORIGIN?
In a technical report published today, Nacho Sanmillan, a security researcher at Intezer Labs, highlights several connections and similarities that HiddenWasp shares with other Linux malware families, suggesting that some of HiddenWasp code might have been borrowed.
HIDDENWASP USED AS A SECOND-STAGE PAYLOAD
Speaking to ZDNet, Sanmillan said he wasn't able to discover how hackers are spreading this new malware strain, although the researcher had his own thoughts on the matter.

Hackers appear to compromise Linux systems using other methods, and then deploy HiddenWasp as a second-stage payload, which they use to control already-infected systems remotely.
Click to expand...

Intezer: HiddenWasp Malware Stings Targeted Linux Systems

Linux malware may introduce new challenges for the security community that we have not yet seen in other platforms. The fact that this malware manages to stay under the radar should be a wake up call for the security industry to allocate greater efforts or resources to detect these threats.
Click to expand...

guest · Oct 11, 2019

HiddenWasp and the Emergence of Linux-based Threats
October 9, 2019
https://www.cyberdefensemagazine.com/hiddenwasp/

The Linux threat ecosystem is crowded with IoT DDoS botnets and crypto-mining malware. However, with low detection rates in nearly all leading anti-virus solutions, Linux threats pose new challenges to the information security community that have not been observed previously in other operating systems.
The low detection rates in anti-virus solutions can likely be attributed to the rapid growth of modern, cloud-based infrastructure in recent years.

Researchers at Intezer recently discovered an undetected malware targeting Linux systems. The malware—which the researchers named HiddenWasp—was enforcing advanced evasion techniques with the use of rootkits in order to avoid detection.
At the time the research was published, HiddenWasp had a zero-detection rate in all major anti-virus systems. Since then, some—but not all—of the engines in VirusTotal have begun to flag the malware.

The recent discovery of HiddenWasp further supports the notion that Linux threats will become more complex over time, and the information security community needs to allocate additional resources in order to more effectively detect and respond to these threats at a larger scale.
Click to expand...

Log in or Sign up

New HiddenWasp malware found targeting Linux systems

guest Guest

guest Guest

Log in or Sign up

New HiddenWasp malware found targeting Linux systems

guest Guest

guest Guest

Useful Searches