274

Powerful Malware Disguised as Crypto Miner Infects 1M+ Windows, Linux PCs (www.pcmag.com)

submitted 10 months ago by Salamendacious@lemmy.world to c/technology@lemmy.world

56 comments fedilink hide all child comments

Antivirus provider Kaspersky uncovers a sophisticated piece of 'StripedFly' malware camouflaged as a cryptocurrency miner that's been targeting PCs for more than five years.

you are viewing a single comment's thread
view the rest of the comments

[-] sir_reginald@lemmy.world 93 points 10 months ago* (last edited 10 months ago)

this makes use of an old windows specific vulnerability. Linux is only mentioned on the title, not again in the whole article. clickbait.

edit: downvote me if you want, but the original article didn't say a thing about Linux.

[-] Salamendacious@lemmy.world 35 points 10 months ago

https://www.bleepingcomputer.com/news/security/stripedfly-malware-framework-infects-1-million-windows-linux-hosts/

On Linux, the malware assumes the name 'sd-pam'. It achieves persistence using systemd services, an autostarting .desktop file, or by modifying various profile and startup files, such as /etc/rc*, profile, bashrc, or inittab files.

[-] Buffalox@lemmy.world 45 points 10 months ago

That's from a completely different article.

And it doesn't say how this is achieved without already having root privilegies. I'm not sure I believe this can in fact infect a Linux system, except if it's already heavily compromised, for instance by a user logging in as root as default.

[-] LDerJim@lemmy.world 1 points 10 months ago

Maybe if root is shared via SMB1 and is rw

[-] Buffalox@lemmy.world 5 points 10 months ago* (last edited 10 months ago)

Not possible AFAIK, I don't use anything Microsoft, but AFAIK SMB1 shares on Linux are through Samba, and you can't just enable write permissions without root. So as I stated before, the Linux system needs to be already compromised.

[-] LDerJim@lemmy.world 1 points 10 months ago

Users can configure the system however they want.

load more comments (4 replies)

load more comments (10 replies)

this post was submitted on 29 Oct 2023

274 points (93.9% liked)

Technology

58133 readers

5693 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS