New Linux malware mines crypto after installing backdoor with secret master password

guest · Sep 16, 2019

New Linux malware mines crypto after installing backdoor with secret master password
Skidmap uses fake statistics to hide its CPU usage
September 16, 2019
https://thenextweb.com/hardfork/201...g-malware-linux-trend-micro-skidmap-backdoor/

Cybersecurity researchers have identified a new strain of Linux malware that not only mines cryptocurrency illicitly, but provides the attackers with universal access to an infected system via a “secret master password.”
According to TrendMicro’s researchers, Skidmap demonstrates the “increasing complexity” of recent cryptocurrency-mining threats.
Cryptocurrency mining malware is still a very real threat
Initial infection occurs in a Linux process called crontab, a standard process that periodically schedules timed jobs in Unix-like systems.

Skidmap then installs multiple malicious binaries, the first minimizing the infected machine’s security settings so that it can begin mining cryptocurrency unhindered.

“Besides the backdoor access, Skidmap also creates another way for its operators to gain access to the machine,” wrote TrendMicro. “The malware replaces the system’s pam_unix.so file (the module responsible for standard Unix authentication) with its own malicious version […].”
Skidmap is also reportedly programmed to reinfect systems that have been cleaned or restored following an infection.
Click to expand...

Trend Micro: Skidmap Linux Malware Uses Rootkit Capabilities to Hide Cryptocurrency-Mining Payload

pandorax · Sep 16, 2019

But how can you achieve to infect your system with that? I mean, you install everything from trusted repos.

Log in or Sign up

New Linux malware mines crypto after installing backdoor with secret master password

guest Guest

pandorax Registered Member

Log in or Sign up

New Linux malware mines crypto after installing backdoor with secret master password

guest Guest

pandorax Registered Member

Useful Searches