this post was submitted on 05 Aug 2025
5 points (100.0% liked)

Linux and Tech News

2062 readers
9 users here now

This is where all the News about Linux and Linux adjacent things goes. We'll use some of the articles here for the show! You can watch or listen at:

You can also get involved at our forum here on Lemmy:

Or just get the most recent episode of the show here:

founded 2 years ago
MODERATORS
leo@lemmy.linuxuserspace.show
5
New Plague Linux malware stealthily maintains SSH access (www.bleepingcomputer.com)
submitted 4 days ago by leo@lemmy.linuxuserspace.show to c/news@lemmy.linuxuserspace.show
2 comments fedilink hide all child comments
top 2 comments
sorted by: hot top controversial new old
[โ€“] ExtremeDullard@lemmy.sdf.org 3 points 4 days ago* (last edited 4 days ago) (1 children)

Calm down.

This malware is a PAM module. Someone with root privileges has to install it.

If you're a random Linux user who doesn't know what PAM is, you have no reason to install it.

If you're a sysadmin and you know what PAM is, you'd need to be diddling in the PAM stack for some reason, and if you come across that one, you're not very likely to install it unless you really, really don't know what you're doing.

The only way it could be distributed to a lot of Linux machines is through a supply chain attack, and I'm pretty certain major distros watch very carefully any patches they onboard in ultra-sensitive system bits like PAM.

[โ€“] XTL@sopuli.xyz 1 points 3 days ago

One more path for malware is that the system has a root hole and this is where the exploit hides the malware.

Or a hostile actor gets their hands on an unencrypted hard drive and installs this when the owner isn't looking.