Subscribe to Updates

    Get the latest creative news from CRYPTO NOUNCE.

    What's Hot

    Learn to Build a ChatGPT Bot for Only $30

    March 25, 2023

    Cardano’s efforts for scaling seem promising, but is ADA well-guarded

    March 25, 2023

    ‘So infuriating’: TikTokers are fuming over potential ban

    March 25, 2023
    Facebook Twitter Instagram
    Facebook Twitter Instagram Vimeo
    Cryptonounce.com
    Contact
    • Business
      • Deals
      • investors
      • IPO
      • Startups
      • Wall Street
    • Markets
      • Bonds
      • Commodities & Futures
      • Currencies
      • Funds & ETFs
      • Stocks
    • Crypto
      • Alticoins News
      • Binance News
      • Bitcoins News
      • Blockchain News
      • Ethereum News
      • Token Sales News
      • XRP News
    • Technology
      • Artificial Intelligence
      • Big Data
      • Cloud Computing
      • Cybersecurity
      • Gaming
      • Internet of Things
      • Mobile
      • Social Media
      • Transportation
      • VR & AR
    • FinTech
    • Personal finance
    • Grides
      • Crypto
      • FinTech
      • Investing
      • Personal Finance Guides
      • Techonology
    • Tools
      • Coins
      • ICO List
      • Organigations
      • Events
    Cryptonounce.com
    Home » New shc-based Linux Malware Targeting Systems with Cryptocurrency Miner
    Cybersecurity

    New shc-based Linux Malware Targeting Systems with Cryptocurrency Miner

    AdmincryptBy AdmincryptJanuary 4, 2023No Comments2 Mins Read
    Facebook Twitter Pinterest LinkedIn Tumblr WhatsApp VKontakte Email
    Share
    Facebook Twitter LinkedIn Pinterest Email


    Jan 04, 2023Ravie LakshmananLinux / Cryptocurrency

    Linux Malware

    A new Linux malware developed using the shell script compiler (shc) has been observed deploying a cryptocurrency miner on compromised systems.

    “It is presumed that after successful authentication through a dictionary attack on inadequately managed Linux SSH servers, various malware were installed on the target system,” AhnLab Security Emergency Response Center (ASEC) said in a report published today.

    Linux malware

    shc allows shell scripts to be converted directly into binaries, offering protections against unauthorized source code modifications. It’s analogous to the BAT2EXE utility in Windows that’s used to convert any batch file to an executable.

    By using shc to generate ELF files, the idea is to protect the malicious shell commands from being inspected and potentially bypass detection by security software as the executables are encoded using the RC4 algorithm.

    In an attack chain detailed by the South Korean cybersecurity firm, a successful compromise of the SSH server leads to the deployment of an shc downloader malware along with a Perl-based DDoS IRC Bot.

    The shc downloader subsequently proceeds to fetch the XMRig miner software to mine cryptocurrency, with the IRC bot capable of establishing connections with a remote server to fetch commands for mounting distributed denial-of-service (DDoS) attacks.

    Linux malware

    “This bot supports not only DDoS attacks such as TCP flood, UDP flood, and HTTP flood, but various other features including command execution, reverse shell, port scanning, and log deletion,” ASEC researchers said.

    The fact that all the shc downloader artifacts were uploaded to VirusTotal from South Korea suggests that the campaign is mainly focused on poorly secured Linux SSH servers in the country.

    It’s recommended that users follow password hygiene and rotate passwords on a periodic basis to prevent brute-force attempts and dictionary attacks. It’s also advised to keep the operating systems up-to-date.

    Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post.





    Source link

    Share. Facebook Twitter Pinterest LinkedIn Tumblr WhatsApp Email
    Previous ArticleIran court orders the release of seized crypto mining equipment
    Next Article Ripple CEO Garlinghouse Is ‘Cautiously Optimistic’ For 2023
    Admincrypt
    • Website

    Related Posts

    U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

    March 25, 2023

    Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

    March 25, 2023

    OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

    March 25, 2023

    Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

    March 24, 2023

    Leave A Reply Cancel Reply

    Our Picks
    • Facebook
    • Twitter
    • Pinterest
    • Instagram
    • YouTube
    • Vimeo
    Don't Miss
    IPO

    Learn to Build a ChatGPT Bot for Only $30

    By AdmincryptMarch 25, 20230

    Disclosure: Our goal is to feature products and services that we think you’ll find interesting…

    Cardano’s efforts for scaling seem promising, but is ADA well-guarded

    March 25, 2023

    ‘So infuriating’: TikTokers are fuming over potential ban

    March 25, 2023

    The biggest financial crises of the last four decades By Reuters

    March 25, 2023

    Subscribe to Updates

    Get the latest creative news from CRYPTO NOUNCE.

    NEWS
    • Business
    • Crypto
    • Blockchain
    • Markets
    • Technology
    FEATURED SECTIONS
    • Coins
    • ICO List
    • Organigations
    • Events
    • Grides
    FEATURED LINKS
    • Story of the day
    • Videos
    • Infographics
    CONNECT WITH US
    • Facebook
    • Twitter
    • Telegram
    • LinkedIn
    • Pinterest
    ABOUT US
    • Contact
    • Advertise
    • Sitemap
    Copyright © 2023 Cryptonounce All rights reserved. Cryptonounce.
    • Home
    • Buy Now

    Type above and press Enter to search. Press Esc to cancel.

    Sign In or Register

    Welcome Back!

    Login to your account below.

    Lost password?