Linux malware not your problem – but it is.

Technical cyber security defences are getting better – there is no doubt about that – just keep the security software updated and do not let anyone argue with the advice and actions the anti-virus or advanced threat protection gives or makes.

However as technical defences improve the threat actors find new ways to infect machines – here is Shiketega stealth malware:

New Linux malware evades detection using multi-stage deployment (bleepingcomputer.com)

New Linux Cryptomining Malware – Schneier on Security

So, you think stealthy malware, that can infect a Linux server and elevate the threat actor’s privileges so they can operate without restraint, is not a problem for you as you do not have a Linux computer. However, the internet is built on Linux servers – now that probably means your websites and domains are hosted on Linux systems. Are you sure your hosting provider has taken all the precautions they can? Has someone checked them out?

When we ask these questions when carrying out a cyber security survey, the usual answer is, “the web designer deals with that”, so go check that the web designer has done their due diligence.

It is your cyber security; you are entitled to ask and to be satisfied with the answers you get. If not, then it is time to find a new supplier.

Clive Catton MSc (Cyber Security) – by-line and other articles