Experts warned today that a new worm is threatening Linux in the latest of a spate of viruses targeting the open source operating system (OS).
According to security group The Sans Institute, the Adore worm, also known as the Red Worm, is a variant of the Ramen and Lion Linux worms that have hit the headlines over the last few months.
It also shares similar traits with them, scanning the internet and checking Linux hosts to determine whether they are vulnerable to any of the following well-known exploits: LPRng, rpc-statd, wu-ftpd and Bind. Red Hat 7.0-based systems are at high risk because LPRng is installed by default.
The worm replaces only the PS program, which performs a similar task to program manager in Windows, with a trojaned version that hides the worm. It then sends an email to [email protected], [email protected], [email protected], [email protected]
Adore attempts to send system configuration files and password files to these addresses and opens a port, which could be used as a backdoor. The worm then reboots the system at 4.02am local time, removing all traces of itself, apart from the backdoor.
The Sans Institute has notified the ISPs hosting the affected addresses to try and have them shutdown, but so far no action has been taken.
Matt Fearnow, incident handler for the Sans Institute, said the exploit methods are known about and "three out of four of these exploits were patched back in August".
But he added that this doesn't mean everyone is safe as some administrators are lax about keeping fixes up to date. "We can only get after the system administrators to keep their systems patched," he said.
Further information and patch files can be found Here.
Cotton seedling freezes to death as Chang'e-4 shuts down for the Moon's 14-day lunar night
Fortnite easily out-earns PUBG, Assassin's Creed Odyssey and Red Dead Redemption 2 in 2018
Meteor showers as a service will be visible for about 100 kilometres in all directions
Saturn's rings only formed in the past 100 million years, suggests analysis of Cassini space probe data
New findings contradict conventional belief that Saturn's rings were formed along with the planet about 4.5 billion years ago