New Malware Quasar Linux Targets Developers, Poses Serious Threat
A new strain of malware, Quasar Linux (QLNX), is making waves in the cybersecurity landscape by specifically targeting developers’ systems. This stealthy implant combines rootkit, backdoor, and credential-stealing capabilities and is deployed in various environments, including npm, PyPI, GitHub, AWS, Docker, and Kubernetes.
The attack primarily affects software developers, allowing cybercriminals to bypass security measures and steal sensitive credentials tied to software delivery pipelines. QLNX employs sophisticated techniques to maintain persistence and avoid detection, including dynamic compilation of malicious components and multiple stealth mechanisms.
The impact of this attack could lead to significant supply-chain vulnerabilities, as compromised credentials may enable attackers to publish malicious packages. To protect against this threat, developers are urged to update their security protocols, monitor for unusual activity, and utilize the indicators of compromise (IoCs) shared by Trend Micro.
Risk Level: High
Source: View Original Report
