Re: [PLUG] Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages

[jeffv via plug <plug@lists.phillylinux.org>]

Check out glances too.

On 1/29/26 17:53, Net Buoy via plug wrote:
> Ok. Thank you. I currently use btop which does a good job at monitoring 
> my system.
>
> On Thu, Jan 29, 2026, 17:35 Michael Lazin via plug 
> <plug@lists.phillylinux.org <mailto:plug@lists.phillylinux.org>> wrote:
>
>     Stay away from the snap store but if you need snap look at your cpu
>     load with something like htop.
>
>     Michael Lazin
>
>     .. τὸ γὰραὐτὸ νοεῖν ἐστίν τε καὶ εἶναι.
>
>
>     On Thu, Jan 29, 2026 at 5:31 PM Net Buoy <netbuoyit@gmail.com
>     <mailto:netbuoyit@gmail.com>> wrote:
>
>         Is there a solution for this?
>
>         On Thu, Jan 29, 2026, 11:10 Michael Lazin via plug
>         <plug@lists.phillylinux.org <mailto:plug@lists.phillylinux.org>>
>         wrote:
>
>             I’ve seen this done on Windows servers.  They infect tons of
>             them and mine Monero with cpu and count on people not
>             looking into the cpu load.
>
>             Michael Lazin
>
>             .. τὸ γὰραὐτὸ νοεῖν ἐστίν τε καὶ εἶναι.
>
>
>             On Thu, Jan 29, 2026 at 9:40 AM Walt Mankowski via plug
>             <plug@lists.phillylinux.org
>             <mailto:plug@lists.phillylinux.org>> wrote:
>
>                 Interesting. I would have thought that any crytomining
>                 worth doing
>                 would use enough CPU that I'd notice it pretty quickly.
>                 But I guess
>                 maybe if you infect enough machines, you can have each
>                 of them run at
>                 a lower priority?
>
>                 On Thu, Jan 29, 2026 at 08:29:07AM -0500, jeffv via plug
>                 wrote:
>                  > Linux Users Targeted as Crypto-stealing Malware Hits
>                 Snap Packages
>                  >
>                  > https://linuxsecurity.com/news/hackscracks/crypto-
>                 stealing-malware-hits-snap-packages <https://
>                 linuxsecurity.com/news/hackscracks/crypto-stealing-
>                 malware-hits-snap-packages>
>                  >
>                  > Several crypto-stealing campaigns are using Snap
>                 packages to land quietly on
>                  > Ubuntu Linux systems. No exploit chains. No privilege
>                 escalation. Just
>                  > software that looked legitimate enough to install,
>                 then stayed resident long
>                  > enough to make money. For attackers focused on
>                 cryptomining, that´s ideal.
>                  > CPU is consumed slowly, the system keeps working, and
>                 nothing obviously
>                  > breaks.
>                  >
>                 ___________________________________________________________________________
>                  > Philadelphia Linux Users Group         -- http://
>                 www.phillylinux.org <http://www.phillylinux.org>
>                  > Announcements - http://lists.phillylinux.org/mailman/
>                 listinfo/plug-announce <http://lists.phillylinux.org/
>                 mailman/listinfo/plug-announce>
>                  > General Discussion  -- http://lists.phillylinux.org/
>                 mailman/listinfo/plug <http://lists.phillylinux.org/
>                 mailman/listinfo/plug>
>                 ___________________________________________________________________________
>                 Philadelphia Linux Users Group         -- http://
>                 www.phillylinux.org <http://www.phillylinux.org>
>                 Announcements - http://lists.phillylinux.org/mailman/
>                 listinfo/plug-announce <http://lists.phillylinux.org/
>                 mailman/listinfo/plug-announce>
>                 General Discussion  -- http://lists.phillylinux.org/
>                 mailman/listinfo/plug <http://lists.phillylinux.org/
>                 mailman/listinfo/plug>
>
>             ___________________________________________________________________________
>             Philadelphia Linux Users Group         -- http://
>             www.phillylinux.org <http://www.phillylinux.org>
>             Announcements - http://lists.phillylinux.org/mailman/
>             listinfo/plug-announce <http://lists.phillylinux.org/
>             mailman/listinfo/plug-announce>
>             General Discussion  -- http://lists.phillylinux.org/mailman/
>             listinfo/plug <http://lists.phillylinux.org/mailman/
>             listinfo/plug>
>
>     ___________________________________________________________________________
>     Philadelphia Linux Users Group         -- http://www.phillylinux.org
>     <http://www.phillylinux.org>
>     Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-
>     announce <http://lists.phillylinux.org/mailman/listinfo/plug-announce>
>     General Discussion  -- http://lists.phillylinux.org/mailman/
>     listinfo/plug <http://lists.phillylinux.org/mailman/listinfo/plug>
>
>
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug