Rootkit infects Linux web servers
A previously unknown rootkit is infecting Linux web servers and injecting malicious code into web pages served by infected servers. The rootkit was discovered by a user of security mailing list Full Disclosure, who has posted his observations, including the suspicious kernel module, to the mailing list. The malware adds an iframe to every web page served by the infected system via the nginx proxy – including error pages.
|
|
Full Story |
This topic does not have any threads posted yet!
You cannot post until you login.