Re:HiddenWasp Malware Stings Targeted Linux Systems
by newnewpdro on Friday May 31, 2019 @04:39AM
(#20059218)
'In addition, in order to check if your system is infected, you can search for “ld.so” files — if any of the files do not contain the string ‘/etc/ld.so.preload’, your system may be compromised.'
> The malware will attempt to find the dynamic linker binary within these paths. The dynamic linker filename is usually prefixed with ld-<version number>.