|
Steve Litt via plug on 6 Feb 2026 20:29:49 -0800
|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
|
- From: Steve Litt via plug <plug@lists.phillylinux.org>
- To: plug@lists.phillylinux.org
- Subject: Re: [PLUG] Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
- Date: Fri, 6 Feb 2026 23:29:30 -0500
- Arc-authentication-results: i=1; rspamd-845545c4df-nxw5v; auth=pass smtp.auth=21tnwsjmfw smtp.mailfrom=slitt@444domains.com
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1770438572; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=PjzRPUEa6UYDr8pp0SsJ72XnvwJZ6hknhmQ2Soy+oHQ=; b=TKf8JWVZNov7vlmKB2Rhf1++Tuvw9TO+nesC0tKv4je04RlT7YnKOM9ks15O1W/YUAZhRh 19ObwKoRDbZGBcYKBVihV6fnXnl9YLl5V5llOLDVoKb0L5o8fmpo4DF5xmApZ8BUlS8mWW T+6iHMVxKUHo1/+qySIzGnlMAOkV2Ep0JCyh/fl5xpntY7NZzM5MaZdVcvkQ87A1+1aQGN H1DuDp6nDcXYYiFIk7tHg13IY7FxjCjBYJIbv1d4L7Tt7o9yDIm8BQPyPL9zeYdzSPToco /q4M4bXrk5NelgL5i9BdJcOxeRApioIzm+93DwbdHpE6TNrq/aTyDi/1o+yzOg==
- Arc-seal: i=1; a=rsa-sha256; d=mailchannels.net; s=arc-2022; cv=none; t=1770438572; b=vrsMmuP4xigQZbAJJ+KqI31vyPJq7Exu++C2YZkF7StjmAwNYYDFBEUeX1dO6jfW/YWyPH x6z0URm7uC/UmMBniUu/A0oVDT9mUqeq1aInBXnFzwKfufeoVvrZll+TMIf1Azry/JhyTb K91CnwnQaCbdb8tut5/jRtr/ffkBgIwlymrJAA4lDENEkdZqqEHzpkeyn+ezyHux344RDe +zLNH9hvW5u67ok5lpBmg6zyZaSggnLLfATcEf4WqxCAYLUPZjPg9JcxlJgUhUmfeQQLrw j1LTMfEUfFQ5R4+7zY2xBNPyUW0tK2zgffQDscnC1Efgzf6M9hnE8UoR9xF24A==
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=444domains.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:References:In-Reply-To:Message-ID:Subject:To:From:Date:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=PjzRPUEa6UYDr8pp0SsJ72XnvwJZ6hknhmQ2Soy+oHQ=; b=vV/OPEvwbh8MLfUuNiix9oaRQs MvwCNtRuWnLGnzbzsloswUAKkOmoCkf3m7td6SZoKksDNU+QSJgCWCVXJV7eEcIldeWe0Xc8qU1S2 RNMbqOxQyznA+PC98EwX2WKiprL8EncWnogYG702u5fb700860puvbKisGEeg7UWKwRkQKyoGRPev 5Qdd+ku5EL1/ltM2aryT414VQsEtZWsxcNtPBxxL5sa/PxPtwUZA/+s6iTQ0dklfOQW4lazodcXbd fMjwJnsJQnAMezU4drjkj+Hp0HtsnWzrK3uZNWz4FcWtjzpQf+PY0H0AL7mW8ab7q4m6pN7f9O8g6 x2GMDh3A==;
- Organization: 444domains.com
- Reply-to: Steve Litt <slitt@444domains.com>
- Sender: "plug" <plug-bounces@lists.phillylinux.org>
On Thu, 29 Jan 2026 08:29:07 -0500
jeffv via plug <plug@lists.phillylinux.org> wrote:
> Linux Users Targeted as Crypto-stealing Malware Hits Snap Packages
>
> https://linuxsecurity.com/news/hackscracks/crypto-stealing-malware-hits-snap-packages
>
> Several crypto-stealing campaigns are using Snap packages to land
> quietly on Ubuntu Linux systems. No exploit chains. No privilege
> escalation. Just software that looked legitimate enough to install,
> then stayed resident long enough to make money. For attackers focused
> on cryptomining, that’s ideal. CPU is consumed slowly, the system
> keeps working, and nothing obviously breaks.
VITAL INFORMATION: The article's title, and indeed the subject line of
this email, are misleading. Nowhere does this article say these
programs are stealing crypto-currency you're keeping on your computer.
They're just using your computer, and those of millions others, to mine
for yet undiscovered crypto prime pairs.
SteveT
Steve Litt
Spring 2023 featured book: Troubleshooting Techniques of the Successful
Technologist http://www.troubleshooters.com/techniques
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug