[sf-lug] Ransomware threat to Linux servers

[Todd Hawley]

>
> On 11/9/20 12:33 PM, Akkana Peck wrote:
>
> > I get so frustrated by reports of malware, especially ransomeware.
> > Seems to me that the important part isn't whether it encrypts or
> > deletes files, or whether it asks for a ransom, but... how does
> > a system get infected with it in the first place, and how should
> > one guard against that? And the articles hardly ever bother to
> > mention that.
>

Often (and I'm pretty sure Rick has alluded to this), these reports appear
and
they seem to be more about scaring people than anything else. Whether it's
due to poor reporting or perhaps some AV firm releasing an article about
some
new virus that can infect your machine (unless of course you have their AV
software
on it).

I can see Rick now reminding people NOT to run unknown executables while in
root.
Because when you do, problems occur.

> The linked Kaspersky page says it's a trojan, apparently an
> > executable that you'd have to run in order to get infected.
> > (As root? Or not? I don't see any mention of that.)
>

Of course not. Where would the fun be in explaining how to AVOID getting
this on
your machine? :p

-th
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/sf-lug/attachments/20201109/6a753101/attachment.html>