• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
suspected russian data wiping 'acidpour' malware targeting linux x86 devices

Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices

You are here: Home / General Cyber Security News / Suspected Russian Data-Wiping ‘AcidPour’ Malware Targeting Linux x86 Devices
March 19, 2024

A new variant of a info wiping malware identified as AcidRain has been detected in the wild that is especially built for concentrating on Linux x86 equipment.

The malware, dubbed AcidPour, is compiled for Linux x86 units, SentinelOne’s Juan Andres Guerrero-Saade reported in a series of posts on X.

“The new variant […] is an ELF binary compiled for x86 (not MIPS) and even though it refers to comparable gadgets/strings, it can be a mostly various codebase,” Guerrero-Saade noted.

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


AcidRain first arrived to gentle in the early days of the Russo-Ukrainian war, with the malware deployed towards KA-SAT modems from U.S. satellite business Viasat.

An ELF binary compiled for MIPS architectures is capable of wiping the filesystem and distinctive recognized storage unit documents by recursively iterating above popular directories for most Linux distributions.

Cybersecurity

The cyber attack was subsequently attributed to Russia by the Five Eyes nations, together with Ukraine and the European Union.

AcidPour, as the new variant is named, is designed to erase content material from RAID arrays and Unsorted Block Impression (UBI) file techniques through the addition of file paths like “/dev/dm-XX” and “/dev/ubiXX,” respectively.

It truly is presently not crystal clear who the supposed victims are, despite the fact that SentinelOne stated it notified Ukrainian businesses. The correct scale of the attacks is presently unknown.

The discovery as soon as once more underscores the use of wiper malware to cripple targets, even as risk actors are diversifying their attack procedures for greatest effects.

Found this post interesting? Comply with us on Twitter  and LinkedIn to browse far more distinctive content we post.


Some areas of this posting are sourced from:
thehackernews.com

Previous Post: «new phishing attack uses clever microsoft office trick to deploy New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT
Next Post: Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks hackers exploiting popular document publishing sites for phishing attacks»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month
  • Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion
  • CTEM is the New SOC: Shifting from Monitoring Alerts to Measuring Risk
  • Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware
  • WordPress Sites Turned Weapon: How VexTrio and Affiliates Run a Global Scam Network
  • New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes
  • AI Agents Run on Secret Accounts — Learn How to Secure Them in This Webinar
  • Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction
  • Non-Human Identities: How to Address the Expanding Security Risk
  • ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks

Copyright © TheCyberSecurity.News, All Rights Reserved.