Submission + - New Malware found lurking in 64-Bit Linux installs (zdnet.com)
syn3rg writes: Researchers are calling it RotaJakiro , and it has 12 functions including data exfiltration:
RotaJakiro was first detected on March 25 when a Netlab distributed denial-of-service (DDoS) botnet C2 command tracking system, BotMon, flagged a suspicious file.
At the time of discovery, there were no malware detections on VirusTotal for the file, despite four samples having been uploaded — two in 2018, one in 2020, and another in 2021.
Netlab researchers say the Linux malware changes its use of encryption to fly under the radar, including ZLIB compression and combinations of AES, XOR, and key rotation during its activities, such as the obfuscation of command-and-control (C2) server communication.
At present, the team says that they do not know the malware's "true purpose" beyond a focus on compromising Linux systems.
