Bash malware targets embedded devices running BusyBox

Attacks that exploit the Shellshock vulnerabilities recently patched in the Bash Unix deliver a malware program that tries to compromise systems running BusyBox, a collection of Unix utilities typically used on embedded devices like routers.

The backdoor-type malware is dubbed Bashlite by security researchers from Trend Micro and it infects Linux-based systems through Shellshock attack vectors.

In September, security researchers found several related vulnerabilities in the Bash shell that can allow remote code execution attacks. These vulnerabilities, collectively known as Shellshock, can be exploited through CGI scripts running on Web servers, the CUPS printing system for Unix-like operating systems, the Secure Shell (SSH), OpenVPN, SMTP servers and other services.

To read this article in full or to leave a comment, please click here