SoylentNews
SoylentNews is people
https://soylentnews.org/

Title    Linux Ransomware is Now Attacking Webmasters
Date    Sunday November 08 2015, @06:12AM
Author    janrinok
Topic   
from the malware-for-idiots dept.
https://soylentnews.org/article.pl?sid=15/11/07/1555215

Arthur T Knackerbracket has found the following story:

A new bit of ransomware is now attacking Linux-based machines, specifically the folders associated with serving web pages. Called Linux.Encoder.1 the ransomware will encrypt your MySQL, Apache, and home/root folders. The system then asks for a single bitcoin to decrypt the files.

From Dr.Web Antivirus:

Once launched with administrator privileges, the Trojan dubbed Linux.Encoder.1 downloads files containing cybercriminals’ demands and a file with the path to a public RSA key. After that, the malicious program starts as a daemon and deletes the original files. Subsequently, the RSA key is used to store AES keys which will be employed by the Trojan to encrypt files on the infected computer.

[Ed's Comment: Emphasis mine.]

Original Submission

Links
  1. "following story" - http://techcrunch.com/2015/11/06/linux-ransomware-is-now-attacking-webmasters/?ncid=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+Techcrunch+(TechCrunch)
  2. "Called Linux.Encoder.1" - http://vms.drweb.com/virus/?i=7703983
  3. "Dr.Web Antivirus" - http://news.drweb.com/show/?i=9686lng=enc=5
  4. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=10499
© Copyright 2026 - SoylentNews, All Rights Reserved

printed from SoylentNews, Linux Ransomware is Now Attacking Webmasters on 2026-02-11 15:23:33