Linux Malware warning !!

[scatter]

Okay it seems another malware appeared in the wild and was discovered by MalwareMustdie so wanted to make sure everyone is aware to check his servers

http://blog.malwaremustdie.org/2014/05/ ... cheme.html" onclick="window.open(this.href);return false;

[bad_brain]

well, to install it the attacker needs full root privileges first, so it's nothing dramatic...I mean, if your system was compromised in such a way then the only option you have is "find out how he got in, reinstall the whole system and make sure the flaw is closed" anyway.

but a good find, very interesting analysis...

[ayu]

Indeed interesting read.
The host that the downloader gets the scripts from seems dead, but there might be more that the analysts haven't covered.

[scatter]

exactlly the host is dead because tha MalwareMustdie guys collect evidences, send them to law enforcments and go after the malware source to clean it and stop the infection that's why it's no more there