Tag: rootkit

2 articles

Linux terminal on a clean desk with a blank command-line interface on the screen.

Malicious Packages Infiltrate Arch Linux Repository with Rootkit Malware

Malicious actors have struck the Arch Linux community by uploading trojanised packages to the Arch User Repository, cleverly disguising them as legitimate AUR helpers like yay and paru. The fake packages, including a malicious yyay package, used identical source code and URLs to blend in with the real deal.

Analyst 207
A cluttered home office workspace with an open laptop showing a terminal window, surrounded by papers and coffee cups.

Malware Exploits Arch Linux Packages to Spread Rootkit, Infostealer

Over 400 Arch Linux packages were compromised in a shocking discovery, distributing a sneaky Linux rootkit and infostealer to unsuspecting users through the Arch User Repository (AUR). A cleverly spoofed maintainer account was used to modify the packages and download malicious code.

Analyst 207