Linux warning: TrickBot malware is now infecting your systems

[britechguy]

Another one from bleepingcomputer:

Linux warning: TrickBot malware is now infecting your systems

It's no surprise that as Linux gets more and more widespread, particularly in data centers, that it's becoming a very juicy target. The days of "Linux doesn't have security issues" are long gone and it's now a very desirable target.

 

[GTP]

https://www.tecmint.com/linux-security-auditing-and-scanning-with-lynis-tool/

Also available from the Software Manager on Debian/Ubuntu/Mint

 

[Sky-Knight]

https://www.tecmint.com/linux-security-auditing-and-scanning-with-lynis-tool/

Also available from the Software Manager on Debian/Ubuntu/Mint

Released 2017? And it's an auditing tool? I'm hoping there's a younger link. Besides...

wget https://cisofy.com/files/lynis-2.5.5.tar.gz

That link is a 404!

*Edit* Updated link https://downloads.cisofy.com/lynis/lynis-3.0.0.tar.gz

So...

wget https://downloads.cisofy.com/lynis/lynis-3.0.0.tar.gz

Then the execute command is no longer

./lynis --check-all

It's...

./lynis audit system

This article is younger: https://www.tecmint.com/scan-linux-for-malware-and-rootkits/ But oddly enough shows up later in Google... HA what fun!

But an interesting tool @Barcelona thanks.

 

[GTP]

I just downloaded the latest tarball, version 3.0.0 - unpacked it and ran it from the downloads folder.

greg@greg-NSA1J42 ~/Downloads/lynis

 sudo -s

./lynis audit system

Dont forget to sudo -s or you'll get permission errors.

You can install it too if you want and set up a cron job to run it regularly.