AERIS MALWARE

[telematico]

AERIS MALWARE LIKES TO INFILTRATE LINUX SERVERS AND SYSTEMS

Even though most technology experts consider Linux to be the most secure operating system, that is not entirely accurate. Over the past few months, we have seen multiple malware types targetting the Linux OS, either to install cryptocurrency mining software or to exfiltrate important data. Never one to sit on the sidelines, the CIA has built its own set of tools to infiltrate Linux servers around the world. One of these is Aeris, a disruptive type of malware capable of affecting popular Linux distros.

Aeris can infiltrate systems running Debian Linux 7, Red Hat Enterprise Linux 6, Solaris 11, FreeBSD 8 and seniors 5.3 and 5.7. That is a large list, considering that a lot of those Linux flavors are very common. Aeris can successfully infiltrate all of these systems and does its work unabated. Its tools include a way to snoop on encrypted communication, hook into SMTP communication, and exfiltrate files automatically.

[telematico]

More: 21 Million Decrypted Gmail, 5 Million Yahoo Accounts Being Sold on Dark Web

A famous Dark Web vendor known by their handle of “DoubleFlag” is selling databases of eleven Bitcoin forums on a popular dark web marketplace. The databases were stolen between 2011 to 2017 from widely visited forums providing information about Bitcoin mining and trading.

The combined number of data stolen from these forums is more than 12,000,000 including

536,727accounts from MerlinsMagicBitcoin.com

which suffered a data breach in January 2017,

514,409 accounts from BitcoinTalk.org forum

 which was hacked in May 2015,

 568,357 stolen from BTC-E.com

 back in October 2014,

 21,439 accounts from BTC4Free.com

which was hacked in January 2014,

 21,439 accounts from BTC4Free.com
 which was also hacked in January 2014.

3,153 Bitcoin.Lixter.com which was breached in September 2014,1,780 BitLeak.net accounts stolen back in March 2014, 28,298 DogeWallet.com accounts stolen in January 2014, 61,011 MtGox.com stolen in June 2011, 34,513 BitsCircle.com (breach date unknown) 10,855,376 BitcoinSec from 2014 breach and 3,149 accounts from TheBitcoinShop.pixub.com (breach date unknown).

[deztroyr1]

besides aeris, there's Achilles and SeaPea doing the same with Apple. looks like the apple fanboys have something to worry about.