Sneaky malware infects Linux installations by camouflaging as legitimate utilities, security researchers warn.
There’s a new malware family in town — and one that attacks Linux systems by concealing itself in legitimate binaries to deliver several backdoor and rootkits. Dubbed FontOnLake, by cybersecurity researchers at ESET, samples of the malware date as far back as May 2020. According to the researchers, the malware makes use of several carefully crafted modules that not just collect credentials, but also give remote access to the threat actors. “The sneaky nature of FontOnLake’s tools in combination with advanced design and low prevalence suggest that they are used in targeted attacks,” believes Vladislav Hrčka, malware analyst and reverse engineer at ESET.
