https://www.bleepingcomputer.com/news/security/lazarus-hackers-now-push-linux-malware-via-fake-job-offers/



>linux has few desktop users, it won't be targeted for mal- ACK!

Haiku will never have this problem.

how many people did they infect?

probably not that many

linux ricers aren't looking for traditional jobs

>HSBC job offer.pdf.zip

lmao who's going to fall for that

>imblying linux users would ever look for a job

what is a malack

>.com/

USA state media detected

imagine the linux users opening that binary file and getting errors because the libraries they have are not compatible with the malware lmao

>>92935725 (OP)

>bleepingcomputer.com

none, the virus isn't fast enough to infect the computer before Linux crashes

>>92935725 (OP)

>run random software from the web

>get fucked

who could've seen this coming?

Lots of Malware for Linux are being written in GO Golang because everything is statically typed. Specially, malware for embedded devices such as printers or routers with Linux firmwares.

>>92935725 (OP)

Linux still beats Windows. With Windows you can get a virus by clicking on a URL in a web browser. Just happened to me last week and had to format my entire PC due to exploit in browser allowing malware onto my Windows PC

what browser?

what if i dont have Go on my machine

bump

Because no one uses it.

>>92935725 (OP)

>In the case discovered by ESET, Lazarus distributes a ZIP archive named "HSBC job offer.pdf.zip" through spearphishing or direct messages on LinkedIn.



>Inside the archive hides a Go-written Linux binary that uses a Unicode character on its name to make it appear like a PDF.



>"Interestingly, the file extension is not .pdf. This is because the apparent dot character in the filename is a leader dot represented by the U+2024 Unicode character," explains ESET.



>"The use of the leader dot in the filename was probably an attempt to trick the file manager into treating the file as an executable instead of a PDF."



>"This could cause the file to run when double-clicked instead of opening it with a PDF viewer."



>When the recipient double-clicks on the file to launch it, the malware, known as "OdicLoader," displays a decoy PDF while simultaneously downloading a second-stage malware payload from a private repository hosted on the OpenDrive cloud service.



That's pretty cool. Does that mean we can distribute lots of fake PDFs online that look legit and infect people?

Seems like it was just a pdf though

do you know what a binary is, faggot?

The same thing can, and definitely does happen on Linux OSes too. Don't be a retard.

Yes, "we" sure can. Go play with your tiny "we"iner, sissy boy.

>Inside the archive hides a Go-written Linux binary that uses a Unicode character on its name to make it appear like a PDF.

>"Interestingly, the file extension is not .pdf. This is because the apparent dot character in the filename is a leader dot represented by the U+2024 Unicode character," explains ESET.

>"The use of the leader dot in the filename was probably an attempt to trick the file manager into treating the file as an executable instead of a PDF."

>"This could cause the file to run when double-clicked instead of opening it with a PDF viewer."

at this point just dont open PDFs anymore.

>Malware

>because everything is statically typed

uh?

I think that anon meant that Go is statically linked
