Menacing Malware: Exposing Threats Lurking in Your Linux-Based Multi-Cloud
This threat report is based on research conducted by the VMware Threat Analysis Unit. It examines strategies to protect Linux-based cloud environments from remote access tools (RATs), ransomware and cryptominers. Download the report for information on existing characterization techniques and how to protect against more sophisticated malware with the right combination of approaches, policies and mechanisms.
What is the current state of Linux-based malware?
Research indicates that Linux-based malware is increasingly targeting multi-cloud environments, with VMware noting that 90% of the cloud is powered by Linux. Traditional security tools have primarily focused on Windows threats, leaving a gap in defenses against Linux malware. VMware's findings highlight the evolution of threats, including ransomware and remote access tools, specifically designed for Linux systems.
How are ransomware attacks evolving in Linux environments?
Ransomware attacks on Linux systems are evolving to target data centers and cloud workloads rather than just individual installations. Attackers often gain initial access through exploited applications or phishing, then establish a foothold to encrypt data or systems. Recent trends show attackers exfiltrating data before demanding ransom, with notable families of ransomware like Defray777 and eCh0raix specifically targeting Linux.
What measures can organizations take to protect against Linux-based threats?
Organizations should adopt a comprehensive security strategy that includes effective data backup and recovery processes, endpoint detection and response (EDR) solutions, and network detection and response (NDR) systems. Implementing a zero-trust strategy and securing workload access and communications across cloud environments are also essential to prevent lateral movement by attackers and to enhance overall security.
.png "Army Of Quants")
Sign in with LinkedIn