Re: [PLUG] Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages

[Michael Lazin via plug <plug@lists.phillylinux.org>]

I’ve seen this done on Windows servers.  They infect tons of them and mine Monero with cpu and count on people not looking into the cpu load.

Michael Lazin

.. τὸ γὰρ αὐτὸ νοεῖν ἐστίν τε καὶ εἶναι.

On Thu, Jan 29, 2026 at 9:40 AM Walt Mankowski via plug <plug@lists.phillylinux.org> wrote:

Interesting. I would have thought that any crytomining worth doing
would use enough CPU that I'd notice it pretty quickly. But I guess
maybe if you infect enough machines, you can have each of them run at
a lower priority?

On Thu, Jan 29, 2026 at 08:29:07AM -0500, jeffv via plug wrote:
> Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
>
> https://linuxsecurity.com/news/hackscracks/crypto-stealing-malware-hits-snap-packages
>
> Several crypto-stealing campaigns are using Snap packages to land quietly on
> Ubuntu Linux systems. No exploit chains. No privilege escalation. Just
> software that looked legitimate enough to install, then stayed resident long
> enough to make money. For attackers focused on cryptomining, that´s ideal.
> CPU is consumed slowly, the system keeps working, and nothing obviously
> breaks.
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug