|
Walt Mankowski via plug on 29 Jan 2026 06:40:41 -0800
|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
|
- From: Walt Mankowski via plug <plug@lists.phillylinux.org>
- To: plug@lists.phillylinux.org
- Subject: Re: [PLUG] Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
- Date: Thu, 29 Jan 2026 09:40:34 -0500
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pobox.com; h=cc :content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1769697636; x=1769784036; bh=2K1fyfolQioJaKUpDmHTgQTWGRLKgxYWmo4H/dgvDVs=; b= eMyV1EGxUtwfWcWtR/q5S77AFLqPYBb6zvljQPHgUuOenJ5l6owX0hiCkSBeWSEc eJ92mUUtOwXqDk//8HfeZv64unuf17JQlaSMCi2U8+P8h4VVTkF9cIkmjnmZJDB2 ZPJvJAz/o2tMUzJfZFrUYYURm53lt3qwLNGb/FSQ7FnWcfu3VtCHsaLrq9qOHkBj m+/3Z22U67gsph918OZxSrBGV6VHCdnG1NFti+eguQa5qI67yuuN2gwiSSnrQ8a7 TGZqruU7NURmbDqiV2Xs/kDYwIy7qAFlvad02Dus1XisEssPh2PrvAdl0DiMAChm aFYa7z+zoqKTZkI/DSDtVA==
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1769697636; x=1769784036; bh=2 K1fyfolQioJaKUpDmHTgQTWGRLKgxYWmo4H/dgvDVs=; b=qKMGxJK4QZdEMVoUX K0QeprM8K85AYuCjzu4JJjAyUK++XKNoSweBOuVD/wjz/igFD7rm9H+ru/t7/AKR K8MwJsLH67VCQIjPUlMslfpqNwKBxG5GtNJTbSvvnHBzMd/LyTFTdIqnQTlYemCW ddH97iCmu42Fy1iA6pJTtf3cp1wnt8+ZkMJiFbdWohqId+K5r1BJDpg7c5UVnn4p jbydBdON5N8b1Z+aqw+a1YDa+ig6mC/1kYY2sCFWrdl3Bi0irg5S/div101Y2SmG Dzb5xsA9gZHoV8jQoaq8v706hQBJzpaEGFz91bx4eOc71dttc0kS8CV+6TJOMBYZ ttUhg==
- Feedback-id: ic84e4812:Fastmail
- Reply-to: Walt Mankowski <waltman@pobox.com>
- Sender: "plug" <plug-bounces@lists.phillylinux.org>
- User-agent: Mutt/2.3.0 (2026-01-25)
Interesting. I would have thought that any crytomining worth doing
would use enough CPU that I'd notice it pretty quickly. But I guess
maybe if you infect enough machines, you can have each of them run at
a lower priority?
On Thu, Jan 29, 2026 at 08:29:07AM -0500, jeffv via plug wrote:
> Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
>
> https://linuxsecurity.com/news/hackscracks/crypto-stealing-malware-hits-snap-packages
>
> Several crypto-stealing campaigns are using Snap packages to land quietly on
> Ubuntu Linux systems. No exploit chains. No privilege escalation. Just
> software that looked legitimate enough to install, then stayed resident long
> enough to make money. For attackers focused on cryptomining, that´s ideal.
> CPU is consumed slowly, the system keeps working, and nothing obviously
> breaks.
> ___________________________________________________________________________
> Philadelphia Linux Users Group -- http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug