• Welcome to Peterborough Linux User Group (Canada) Forum.
 

Article: Linux.Proxy.10 infects thousands of devices with standard settings

Started by Jason, January 31, 2017, 02:43:25 AM

Previous topic - Next topic

0 Members and 2 Guests are viewing this topic.

Jason

From SC Magazine:

QuoteDr. Web researchers spotted a Linux trojan, dubbed Linux.Proxy.10 that has been used to infect thousands of Linux devices.

https://www.scmagazine.com/linux-trojan-targets-vulnerable-devices-via-ssh-protocol/article/634563/

It's a really short article but if you're interested in more, check the links within. The blog post is quite fascinating.
* Zorin OS 17.1 Core and Windows 11 Pro on a Dell Precision 3630 Tower with an
i5-8600 3.1 GHz 6-core processor, dual 22" displays, 16 GB of RAM, 512 GB Nvme and a Geforce 1060 6 GB card
* Motorola Edge (2022) phone with Android 13

ssfc72

Hmm!  The Link in the article, takes you to the Dr. Web website.
The Dr. Web website, is promoting their Dr. Web Antivirus software and this software is by a Russian Developer, according to their post at the bottom of the web page.

Not sure if I would want to install a Russian developer, Antivirus, on my computer.  I would be concerned that it would actually put virus software on the computer.
From further Googling, though, it appears Dr Web Antivirus may be Ok, but I think I would go with something more well known, such as Avast Antivirus, if I was going to run a Antivirus scan on my Linux computer.

With Avast Antivirus for Linux, they don't seem to have a desktop version but you could download a 30 day trial version of their Server antivirus, which I think should work fine on a desktop install of a Linux Distro.
Mint 20.3 on a Dell 14" Inspiron notebook, HP Pavilion X360, 11" k120ca notebook (Linux Lubuntu), Dell 13" XPS notebook computer (MXLinux)
Cellphone Samsung A50, Koodo pre paid service

Jason

Quote from: ssfc72 on January 31, 2017, 06:41:38 AM
Not sure if I would want to install a Russian developer, Antivirus, on my computer.  I would be concerned that it would actually put virus software on the computer.
From further Googling, though, it appears Dr Web Antivirus may be Ok, but I think I would go with something more well known, such as Avast Antivirus, if I was going to run a Antivirus scan on my Linux computer.

I hear ya'! Not sure I'd want to, either but then with the Putin-backed President in the US, who knows if American companies are safe either! But seriously, I wasn't suggesting going with their software just that their blog had an interesting writeup of it.

QuoteWith Avast Antivirus for Linux, they don't seem to have a desktop version but you could download a 30 day trial version of their Server antivirus, which I think should work fine on a desktop install of a Linux Distro.

Yes, I'm sure you could. I'm guessing the server antivirus might be overkill, though. It's probably designed to detect all those nasty windows viruses, too, because Linux servers are often used as mail servers so attachments are scanned. For now, the free ones are probably sufficient. Here's a bunch:

http://www.makeuseof.com/tag/free-linux-antivirus-programs/
* Zorin OS 17.1 Core and Windows 11 Pro on a Dell Precision 3630 Tower with an
i5-8600 3.1 GHz 6-core processor, dual 22" displays, 16 GB of RAM, 512 GB Nvme and a Geforce 1060 6 GB card
* Motorola Edge (2022) phone with Android 13