SoylentNews

Linux Ransomware is Now Attacking Webmasters

posted by janrinok on Sunday November 08 2015, @06:12AM   
from the malware-for-idiots dept.

Arthur T Knackerbracket has found the following story:

A new bit of ransomware is now attacking Linux-based machines, specifically the folders associated with serving web pages. Called Linux.Encoder.1 the ransomware will encrypt your MySQL, Apache, and home/root folders. The system then asks for a single bitcoin to decrypt the files.

From Dr.Web Antivirus:

Once launched with administrator privileges, the Trojan dubbed Linux.Encoder.1 downloads files containing cybercriminals’ demands and a file with the path to a public RSA key. After that, the malicious program starts as a daemon and deletes the original files. Subsequently, the RSA key is used to store AES keys which will be employed by the Trojan to encrypt files on the infected computer.

---

[Ed's Comment: Emphasis mine.]

Original Submission

• root?root? (Score: 3, Funny) by jasassin on Sunday November 08 2015, @06:49AM

  by jasassin (3566) <jasassin@gmail.com> on Sunday November 08 2015, @06:49AM (#260255) Homepage Journal

  Running Trojans as root... on the next Jeraldo.

  --
  jasassin@gmail.com GPG Key ID: 0xE6462C68A9A3DB5A

  Starting Score:	1		point
  Moderation		+1
  Funny=1, Total=1
  Extra 'Funny' Modifier		0
  Karma-Bonus Modifier		+1
  Total Score:		3

• Re:root?(Score: 5, Funny) by Anonymous Coward on Sunday November 08 2015, @07:06AM

  by Anonymous Coward on Sunday November 08 2015, @07:06AM (#260258)

  "You have to run that with sudo if it doesn't work" -Ubuntu forums

  Parent