Any thoughts on the Shikitega malware?

d_fajardo · 2022-09-06 10:42:17

I've just been reading about the Shikitega malware. I must admit I don't understand it all so just would like to hear opinions on it.
Is this severe? And how do we protect against it. There are already recommended actions on the site but any more suggestions are of course helpful.

Slithery · 2022-09-06 11:05:03

That piece of malware relies on two different exploits. One of them has already been fixed...
https://security.archlinux.org/CVE-2021-4034
and the other only applies to a Ubuntu patched kernel...
https://cve.mitre.org/cgi-bin/cvename.c … -2021-3493

I'd say there's nothing to worry about.

Lone_Wolf · 2022-09-06 11:24:09

Looking at the article, during the first 2 stages it only needs user rights.
The vulnerabilities to elevate to root make the 3rd stage possible.

Assuming an archlinux system is fully uptodate , this malware could enter the system but not do much harm.

d_fajardo · 2022-09-06 12:29:36

Ok, thanks for the thoughts.

Arch Linux

#1 2022-09-06 10:42:17

Any thoughts on the Shikitega malware?

#2 2022-09-06 11:05:03

Re: Any thoughts on the Shikitega malware?

#3 2022-09-06 11:24:09

Re: Any thoughts on the Shikitega malware?

#4 2022-09-06 12:29:36

Re: Any thoughts on the Shikitega malware?

Board footer