SoylentNews

Linux Ransomware is Now Attacking Webmasters

posted by janrinok on Sunday November 08 2015, @06:12AM   
from the malware-for-idiots dept.

Arthur T Knackerbracket has found the following story:

A new bit of ransomware is now attacking Linux-based machines, specifically the folders associated with serving web pages. Called Linux.Encoder.1 the ransomware will encrypt your MySQL, Apache, and home/root folders. The system then asks for a single bitcoin to decrypt the files.

From Dr.Web Antivirus:

Once launched with administrator privileges, the Trojan dubbed Linux.Encoder.1 downloads files containing cybercriminals’ demands and a file with the path to a public RSA key. After that, the malicious program starts as a daemon and deletes the original files. Subsequently, the RSA key is used to store AES keys which will be employed by the Trojan to encrypt files on the infected computer.

---

[Ed's Comment: Emphasis mine.]

Original Submission

• Relieve Relieve (Score: 4, Funny) by maxwell demon on Sunday November 08 2015, @09:40AM

  by maxwell demon (1608) on Sunday November 08 2015, @09:40AM (#260273) Journal

  After I read the headline, I already was worried. But the summary cleared it up: It is just attacking the servers.

  --
  The Tao of math: The numbers you can count are not the real numbers.

  Starting Score:	1		point
  Moderation		+2
  Funny=2, Total=2
  Extra 'Funny' Modifier		0
  Karma-Bonus Modifier		+1
  Total Score:		4

• Re:Relieve (Score: 2) by Subsentient on Sunday November 08 2015, @11:30AM

  by Subsentient (1111) on Sunday November 08 2015, @11:30AM (#260302) Homepage Journal

  Fuck you dude. I run servers. :^)

  --
  "It is no measure of health to be well adjusted to a profoundly sick society." -Jiddu Krishnamurti

  Parent