News in the Linux category

Free Download Manager site redirected Linux users to malware for years

A reported Free Download Manager supply chain attack redirected Linux users to a malicious Debian package repository that installed information-stealing malware.
- Bill Toulas
- September 12, 2023
- 11:25 AM
- 5
Kali Linux 2023.3 released with 9 new tools, internal changes

Kali Linux 2023.3, the third version of 2023, is now available for download, with nine new tools and internal optimizations.
- Lawrence Abrams
- August 23, 2023
- 12:32 PM
- 0
Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws

Two Linux vulnerabilities introduced recently into the Ubuntu kernel create the potential for unprivileged local users to gain elevated privileges on a massive number of devices.
- Bill Toulas
- July 26, 2023
- 02:51 PM
- 0
Fake Linux vulnerability exploit drops data-stealing malware

Cybersecurity researchers and threat actors are targeted by a fake proof of concept (PoC) CVE-2023-35829 exploit that installs a Linux password-stealing malware.
- Bill Toulas
- July 13, 2023
- 02:28 PM
- 3
New StackRot Linux kernel flaw allows privilege escalation

A new privilege escalation vulnerability impacting Linux was discovered, enabling unprivileged local users to compromise the kernel and elevate their rights to attain root-level access.
- Bill Toulas
- July 06, 2023
- 03:27 AM
- 1
Linux version of Akira ransomware targets VMware ESXi servers

The Akira ransomware operation uses a Linux encryptor to encrypt VMware ESXi virtual machines in double-extortion attacks against companies worldwide.
- Bill Toulas
- June 28, 2023
- 02:51 PM
- 0
New Condi malware builds DDoS botnet out of TP-Link AX21 routers

A new DDoS-as-a-Service botnet called "Condi" emerged in May 2023, exploiting a vulnerability in TP-Link Archer AX21 (AX1800) Wi-Fi routers to build an army of bots to conduct attacks.
- Bill Toulas
- June 20, 2023
- 05:06 PM
- 0
Hackers infect Linux SSH servers with Tsunami botnet malware

An unknown threat actor is brute-forcing Linux SSH servers to install a wide range of malware, including the Tsunami DDoS (distributed denial of service) bot, ShellBot, log cleaners, privilege escalation tools, and an XMRig (Monero) coin miner.
- Bill Toulas
- June 20, 2023
- 01:50 PM
- 3
New Fractureiser malware used CurseForge Minecraft mods to infect Windows, Linux

Hackers used the popular Minecraft modding platforms Bukkit and CurseForge to distribute a new 'Fractureiser' information-stealing malware through uploaded modifications and by injecting malicious code into existing projects.
- Bill Toulas
- June 07, 2023
- 12:34 PM
- 0
Kali Linux 2023.2 released with 13 new tools, pre-built HyperV image

Kali Linux 2023.2, the second version of 2023, is now available with a pre-built Hyper-V image and thirteen new tools, including the Evilginx framework for stealing credentials and session cookies.
- Lawrence Abrams
- May 31, 2023
- 03:55 PM
- 1
New Linux kernel NetFilter flaw gives attackers root privileges

A new Linux NetFilter kernel flaw has been discovered, allowing unprivileged local users to escalate their privileges to root level, allowing complete control over a system.
- Bill Toulas
- May 09, 2023
- 12:49 PM
- 0
Linux version of RTM Locker ransomware targets VMware ESXi servers

RTM Locker is the latest enterprise-targeting ransomware operation found to be deploying a Linux encryptor that targets virtual machines on VMware ESXi servers.
- Bill Toulas
- April 27, 2023
- 12:20 PM
- 1
Lazarus hackers now push Linux malware via fake job offers

A new Lazarus campaign considered part of "Operation DreamJob" has been discovered targeting Linux users with malware for the first time.
- Bill Toulas
- April 20, 2023
- 11:43 AM
- 0
QNAP warns customers to patch Linux Sudo flaw in NAS devices

Taiwanese hardware vendor QNAP warns customers to secure their Linux-powered network-attached storage (NAS) devices against a high-severity Sudo privilege escalation vulnerability.
- Sergiu Gatlan
- March 29, 2023
- 02:15 PM
- 1
NordVPN open sources its Linux VPN client and libraries

Nord Security (Nord) has released the source code of its Linux NordVPN client and associated networking libraries in the hopes of being more transparent and easing users' security and privacy concerns.
- Lawrence Abrams
- March 15, 2023
- 05:34 PM
- 0
Iron Tiger hackers create Linux version of their custom malware

The APT27 hacking group, aka "Iron Tiger," has prepared a new Linux version of its SysUpdate custom remote access malware, allowing the Chinese cyberespionage group to target more services used in the enterprise.
- Bill Toulas
- March 01, 2023
- 01:44 PM
- 0
New Mirai malware variant infects Linux devices to build DDoS botnet

A new Mirai botnet variant tracked as 'V3G4' targets 13 vulnerabilities in Linux-based servers and IoT devices to use in DDoS (distributed denial of service) attacks.
- Bill Toulas
- February 16, 2023
- 05:12 PM
- 0
Clop ransomware flaw allowed Linux victims to recover files for months

The Clop ransomware gang is now also using a malware variant that explicitly targets Linux servers, but a flaw in the encryption scheme has allowed victims to quietly recover their files for free for months.
- Bill Toulas
- February 07, 2023
- 06:00 AM
- 1
Hackers hijack Linux devices using PRoot isolated filesystems

Hackers are abusing the open-source Linux PRoot utility in BYOF (Bring Your Own Filesystem) attacks to provide a consistent repository of malicious tools that work on many Linux distributions.
- Bill Toulas
- December 05, 2022
- 12:15 PM
- 1
Linux Kernel 5.19.12 bug could damage Intel laptop displays

Linux users have reported seeing weird white flashes and rapid blinking on their Intel laptop displays after upgrading to Linux kernel version 5.19.12, leading to warnings that the bug may damage displays.
- Bill Toulas
- October 06, 2022
- 11:07 AM
- 1