Closed Malware found in ubuntu

[MayBeBasic]

CT:OMG! Ubuntu

Malware has been found hiding inside software on the Ubuntu Snap store.

A pair of (seemingly normal) apps hosted by the Canonical-backed app hub were discovered to contain a сryptocurrency miner disguised as the “systemd” daemon.

The affected apps also shipped an “init script” to auto-load the malicious code on boot and allow it to run in the background on affected systems.

Canonical says it has “removed all applications from this author pending further investigations” since learning of the flaw via a Github issue at the weekend.

Because the Snap Store doesn’t provide public facing install numbers for apps it holds it’s unclear how many Linux users have been affected by this “miner issue”, though it’s worth noting that both apps were only uploaded in late April.

Regardless of the exact figure it’s a given that many users will now be asking how this was allowed to happen in the first place.

Read the full article by clicking this:
You do not have permission to view the full content of this post. Log in or register now.

What do you think?

 

[zeph016]

Thanks for the share TS.

It's not really a malware but more like a badware. Articles exaggerate these to generate clicks.

PPA is still the way to go for now. Snap isn't checked line by line, although sandboxed, I still wonder how it went through. Perhaps a permission pop up.