178
New Linux malware is controlled through emojis sent from Discord (www.bleepingcomputer.com)
submitted 2 years ago by to c/linux@programming.dev
21 comments fedilink hide all child comments

all 22 comments

sorted by: hot top controversial new old
[–] 119 points 2 years ago

Tl;Dr new Linux malware specific to a flavor used by the Indian government uses emojis as a c2 comms path

  • permalink
  • fedilink
  • source
    •
    [–] 61 points 2 years ago (14 children)

    The joke's on you, malware devs! I never use Discord, and never did on my Linux machines.

  • permalink
  • fedilink
  • source
  • hideshow 14 child comments
    •
  • [–] 9 points 2 years ago (9 children)

    Let's see if the flatpak ideas about sandboxing being pushed down our throats actually prevent these abuses or not...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 6 points 2 years ago (8 children)

    I'm honestly so sick of everything being sandboxed. The security is not worth the hassle.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 16 points 2 years ago (3 children)

    More so, if it is easily sandboxed, it should just be a webapp. Which discord already is.
    Just use the website.

    Browsers are already easily themed, have plenty of tools to change deeper functionality, and are way more sandboxed than any other app packaging ecosystem.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 2 years ago (3 children)

    what hassle?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 15 points 2 years ago (2 children)

    Everything is ever so slightly broken in a way that I just can't ignore. Personalization doesn't quite work. Permissions are overwhelming and usually lead to silent failures. Integration with the rest of the system is weak at best.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 2 years ago (1 child)

    so problems from programs that don't support flatpak, not flatpak fault, because everything you said is supported

    Everything is ever so slightly broken in a way that I just can't ignore.

    this isn't even caused by flatpak, it's the app fault

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 2 years ago

    I don't care whose fault it is, it's obnoxious and I don't want to bother with it. Lately though, it seems like everything is only being released as a flatpak app despite those issues.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 20 points 2 years ago (3 children)

    Asking as someone who is absolutely not tech proficient compared to most lemmy users: is this a vulnerability with Linux or Discord specifically, or is this something that could be carried out on any OS/messenger if the computer was infected?

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 40 points 2 years ago (1 child)

    From the article, it sounds as though this isn't something a normal user should be worried about. They said the security researched believe it targets a Linux distribution used by the Indian government, and the phishing/malicious links seem intended to target Indian officials.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • [–] 5 points 2 years ago

    Interesting, thanks!

  • permalink
  • fedilink
  • source
    •
    [+] 0 points 2 years ago* (last edited 2 years ago)
    [deleted]
  • permalink
  • fedilink
  • source
    •