• Hacking News
    • Leaks
    • WikiLeaks
    • Anonymous
  • Tech
    • Android
    • Apple News
    • BlackBerry
    • Google News
    • Microsoft
    • Motorola
    • Nokia
    • Samsung
    • 3D
  • Cyber Crime
    • Phishing Scam
  • How To
  • Cyber Events
    • Censorship
    • Cyber Attacks
  • Security
    • Malware
  • Surveillance
    • Drones
    • NSA
    • Privacy
  • Explore
    • Gaming
    • Science
    • Viral
HackRead
  • January 22nd, 2021
  • Home
  • Advertise
  • Privacy Policy
  • Contact Us
HackRead
  • Hacking News
    • Leaks
    • WikiLeaks
    • Anonymous
  • Tech
    • Android
    • Apple News
    • BlackBerry
    • Google News
    • Microsoft
    • Motorola
    • Nokia
    • Samsung
    • 3D
  • Cyber Crime
    • Phishing Scam
  • How To
  • Cyber Events
    • Censorship
    • Cyber Attacks
  • Security
    • Malware
  • Surveillance
    • Drones
    • NSA
    • Privacy
  • Explore
    • Gaming
    • Science
    • Viral
  • Follow us
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
Home
Security
Malware

Researchers Found Another Malware Targeting Linux Users

December 4th, 2015 Uzair Amir Malware, Security 0 comments
Researchers Found Another Malware Targeting Linux Users
Share on FacebookShare on Twitter

Linux is considered as one of the most secure operating systems — However, there’s a trojan attacking specifically those on Linux.

Linux users could be in danger of getting attacked by a powerful and picky Trojan as a Russian anti-virus maker, Dr.Web, has found a Trojan which is aimed towards Linux users known as Rekoobe.

The anti-virus makers found this Trojan in October but at that time they weren’t sure on how it works and how dangerous it could be for the users.

What Dr.Web discovered in two months was that the Trojan was initially developed for only Linux SPARC architectures but is wasn’t long before an upgraded version was developed by the hackers which targeted Linux PCs running on intel chips, on both 32 bit and 54-bit architectures.

[fullsquaread][/fullsquaread]

The Trojan itself is very simple but very difficult to detect as it uses an encryption configuration file (via the XOR algorithm). In some instances, researchers found the Trojan getting connected to the C&C server through a proxy which helped its main server to remain anonymous.

Though, the Trojan on its own can’t do much but if its operator wants to go for a full compromise of the system he can do it.

Here are the main operations of the Trojan:

The trojan downloads files from its C&C server, uploads files to the C&C server and execute commands on the local shell.

Many analysts believe Rebooke is a harmless Trojan which is true, but its simple design allows the attacker to maneuver the type of attacks which can allow them to deliver powerful payloads on the systems.

What’s the most troubling part of this Trojan is that its developers are more focused on making the Trojan secured rather then what functions it can carry out. Meaning even if the Trojan is once identified by the security system, doesn’t mean it can always as developers know how to make it more secure and as of now most of the anti-virus products will fail to detect this Trojan with it using encryption for its configuration file.

While giving out the curing recommendations, Dr.Web revealed that this Trojan may also be targeting Android, Mac OS X and Windows.

This is not the first time when cyber criminals are targeting Linux users. Just last month the security researchers discovered a sophisticated Ransomware scam targeting Linux OS.

[src src=”Source” url=”http://vms.drweb.com/virus/?i=7754026&lng=en”]Dr Web[/src] 

  • Tags
  • Cryber Criminals
  • Hacks
  • Linux
  • Malware
  • OS
  • Scams
  • security
  • TROJAN
Facebook Twitter LinkedIn Pinterest
Previous article Hacker Breaches UAE Bank Server, Demands $3m in Ransom
Next article Latest Facebook Phishing Scam Targets Video Users
Uzair Amir

Uzair Amir

I am an Electronic Engineer, an Android Game Developer and a Tech writer. I am into music, snooker and my life motto is 'Do my best, so that I can't blame myself for anything.'

Related Posts
Gamarue malware found in UK Govt-funded laptops for homeschoolers

Gamarue malware found in UK Govt-funded laptops for homeschoolers

Shazam Vulnerability exposed location of Android, iOS users

Shazam Vulnerability exposed location of Android, iOS users

Ongoing 'FreakOut' malware attack turns Linux devices into IRC botnet

Ongoing 'FreakOut' malware attack turns Linux devices into IRC botnet

Newsletter

Get the best stories straight into your inbox!



Don’t worry, we don’t spam

Latest Posts
Massive privacy risk as hacker sold 2 million MyFreeCams user records
Cyber Crime

Massive privacy risk as hacker sold 2 million MyFreeCams user records

20
Gamarue malware found in UK Govt-funded laptops for homeschoolers
Security

Gamarue malware found in UK Govt-funded laptops for homeschoolers

37
Shazam Vulnerability exposed location of Android, iOS users
Security

Shazam Vulnerability exposed location of Android, iOS users

365

HACKREAD is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance and Hacking News with full-scale reviews on Social Media Platforms & Technology trends. Founded in 2011, HackRead is based in the United Kingdom.

Follow us