Threat Advisory

New SHC-compiled Linux malware installs cryptominers, DDoS bots

Threat: Malware
Criticality: High
[subscribe_to_unlock_form]

Summary:

A new Linux malware downloader created using shell script compiler (SHC )has been seen in the wild recently. SHC is a generic shell script compiler for Linux, able to convert bash shell scripts into ELF (Linux and Unix executable) files. The malicious bash shell scripts contain systems command which can be detected by security software installed on a linux device. According to the researchers the SHC loader was uploaded to VirusTotal by Korean users with attacks generally focused on linux system. The attacks mainly rely on brute forcing weak admin account credentials over SSH on linux servers.[/subscribe_to_unlock_form]

Summary:

A new Linux malware downloader created using shell script compiler (SHC )has been seen in the wild recently. SHC is a generic shell script compiler for Linux, able to convert bash shell scripts into ELF (Linux and Unix executable) files. The malicious bash shell scripts contain systems command which can be detected by security software installed on a linux device. According to the researchers the SHC loader was uploaded to VirusTotal by Korean users with attacks generally focused on linux system. The attacks mainly rely on brute forcing weak admin account credentials over SSH on linux servers.[emaillocker id="1283"]

Threat Profile:

References:

The following reports contain further technical details:

https://www.bleepingcomputer.com/news/security/new-shc-compiled-linux-malware-installs-cryptominers-ddos-bots/

[/emaillocker]
crossmenu