Linux malware (English Wikipedia)

ClamAV (2010). "Clam AntiVirus 0.96 User Manual" (PDF). Archived (PDF) from the original on 19 February 2011. Retrieved 22 February 2011.
"ClamAV". Archived from the original on 22 July 2013. Retrieved 22 February 2011.
"ClamavNet". www.clamav.net. Archived from the original on 22 July 2013. Retrieved 3 December 2008.

code.google.com (Global: 4,942^nd place; English: 4,061^st place)

"Google Code Archive - Long-term storage for Google Code Project Hosting". code.google.com. Archived from the original on 27 August 2019. Retrieved 7 September 2019.

comodo.com (Global: low place; English: low place)

comodo.com

Comodo Group (2015). "Comodo Antivirus for Linux". Archived from the original on 11 December 2015. Retrieved 17 October 2012.

forums.comodo.com

"COMODO Antivirus for Linux (CAVL) v1.1.268025.1 is released!". comodo.com. 28 February 2013. Archived from the original on 18 November 2018. Retrieved 12 June 2014.

computerworld.com (Global: 2,429^th place; English: 1,561^st place)

Lucian Constantin (10 November 2015). "First Linux ransomware program cracked, for now". Computerworld. Archived from the original on 12 November 2015. Retrieved 10 November 2015.

cybersecurity-insiders.com (Global: low place; English: low place)

Goud, Naveen (6 September 2019). "LiLocked Ransomware hits Linux Servers". Archived from the original on 21 February 2021. Retrieved 7 September 2019.

doi.org (Global: 2^nd place; English: 2^nd place)

Duncan, Rory; Schreuders, Z. Cliffe (1 March 2019). "Security implications of running windows software on a Linux system using Wine: a malware analysis study". Journal of Computer Virology and Hacking Techniques. 15 (1): 39–60. doi:10.1007/s11416-018-0319-9. ISSN 2263-8733.

drweb.com (Global: low place; English: low place)

products.drweb.com

"Dr.Web anti-virus for Linux". Dashke. Archived from the original on 27 February 2019. Retrieved 25 May 2010.

vms.drweb.com

"Linux.Encoder.1". drweb.com. Archived from the original on 17 November 2015. Retrieved 10 November 2015.

ebscohost.com (Global: 1,786^th place; English: 1,096^th place)

connection.ebscohost.com

Prince, Brian (5 January 2013). "Stealthy Apache Exploit Redirects Victims to Blackhole Malware".

eof-project.net (Global: low place; English: low place)

vx.eof-project.net

herm1t (August 2008). "Linux.42: Using CRC32B (SSE4.2) instruction in polymorphic decryptor". Archived from the original on 7 January 2011.{{cite web}}: CS1 maint: numeric names: authors list (link)

eset.com (Global: low place; English: low place)

"ESET File Security - Antivirus Protection for Linux, BSD, and Solaris". Eset. Archived from the original on 18 November 2018. Retrieved 26 October 2008.
"ESET Mail Security - Linux, BSD, and Solaris mail server protection". Eset. Archived from the original on 12 May 2008. Retrieved 26 October 2008.
"ESET NOD32 Antivirus for Linux Gateway Devices". Eset. Archived from the original on 10 May 2008. Retrieved 26 October 2008.
"ESET NOD32 Antivirus 4 for Linux Desktop". Eset. Archived from the original on 21 July 2015. Retrieved 12 June 2014.

eweek.com (Global: 5,390^th place; English: 3,454^th place)

Prince, Brian (1 May 2013). "Stealthy Apache Exploit Redirects Victims to Blackhole Malware". eWeek. Retrieved 19 November 2014.

f-prot.com (Global: low place; English: low place)

FRISK Software International (2011). "F-PROT Antivirus for Linux x86 / BSD x86". Archived from the original on 4 December 2011. Retrieved 13 December 2011.

f-secure.com (Global: low place; English: low place)

Rautiainen, Sami; et al. (March 2001). "F-Secure Virus Descriptions: Lindose". Archived from the original on 21 June 2008. Retrieved 8 March 2008.
Rautiainen, Sami (April 2001). "F-Secure Virus Descriptions: Adore". Archived from the original on 12 May 2013. Retrieved 8 March 2008.
Rautiainen, Sami (April 2001). "F-Secure Virus Descriptions: Kork". Archived from the original on 12 May 2013. Retrieved 8 March 2008.
Rautiainen, Sami; et al. (September 2002). "F-Secure Virus Descriptions: Slapper". Archived from the original on 27 June 2012. Retrieved 8 March 2008.

forcepoint.com (Global: low place; English: low place)

"Forcepoint". Forcepoint. Archived from the original on 23 January 2020. Retrieved 7 September 2019.

fortune.com (Global: 433^rd place; English: 284^th place)

Hackett, Robert (3 October 2016). "Why a Hacker Dumped Code Behind Colossal Website-Trampling Botnet". Fortune.com. Archived from the original on 22 October 2016. Retrieved 19 October 2016.

github.com (Global: 383^rd place; English: 320^th place)

"Lynis: Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. - CISOf." 7 September 2019. Archived from the original on 5 February 2020. Retrieved 9 January 2017 – via GitHub.

grahamcluley.com (Global: low place; English: low place)

David Bisson (17 October 2016). "NyaDrop exploiting Internet of Things insecurity to infect Linux devices with malware". Graham Cluley. Archived from the original on 5 November 2018. Retrieved 4 November 2018.

hellug.gr (Global: low place; English: low place)

members.hellug.gr

"The Wit Virus: A virus built on the ViT ELF virus" (PDF). Archived (PDF) from the original on 3 March 2016. Retrieved 31 December 2008.

ibm.com (Global: 1,131^st place; English: 850^th place)

newsroom.ibm.com

"IBM Security Report: Attacks on Industries Supporting COVID-19 Response Efforts Double". IBM Newsroom.

insecurety.net (Global: low place; English: low place)

Infodox (12 June 2012). "Hydra IRC bot, the 25 minute overview of the kit". Insecurety Research. Archived from the original on 7 February 2014. Retrieved 12 June 2012.

internetnews.com (Global: low place; English: 8,800^th place)

Patrizio, Andy (April 2006). "Linux Malware On The Rise". Archived from the original on 5 February 2012. Retrieved 8 March 2008.

kaspersky.com (Global: low place; English: low place)

"Kaspersky Linux Security - Gateway, mail and file server, workstation protection for Linux/FreeBSD". Kaspersky Lab. Archived from the original on 24 June 2011. Retrieved 11 February 2009.
"KVRT for Linux: Malware scanner for Linux systems". 30 May 2024.

krebsonsecurity.com (Global: low place; English: low place)

Krebs, Brian (21 September 2016). "KrebsOnSecurity Hit With Record DDoS". Brian Krebs. Archived from the original on 15 November 2016. Retrieved 17 November 2016.

la-samhna.de (Global: low place; English: low place)

"samhain The SAMHAIN file integrity / host-based intrusion detection system". Retrieved 3 October 2021.

librenix.com (Global: low place; English: low place)

Yeargin, Ray (July 2005). "The short life and hard times of a linux virus". Archived from the original on 1 May 2008. Retrieved 6 December 2015.

linux-magazine.com (Global: low place; English: low place)

"The ways of viruses in Linux HOW SAFE?" (PDF). Archived from the original (PDF) on 17 May 2014. Retrieved 21 August 2009.
Joe Casad (3 December 2013). "New Worm Attacks Linux Devices". Linux Magazine. Archived from the original on 6 December 2013. Retrieved 4 December 2013.

linuxmafia.com (Global: low place; English: low place)

"Virus Department". Archived from the original on 25 December 2015. Retrieved 24 December 2015.

loc.gov (Global: 70^th place; English: 63^rd place)

webarchive.loc.gov

volatilesystems.com Archived 2011-02-17 at the Library of Congress Web Archives

lwn.net (Global: 4,423^rd place; English: 2,925^th place)

Vervloesem, Koen (December 2009). "Linux malware: an incident and some solutions". Archived from the original on 18 November 2016. Retrieved 16 September 2010.

malwaremustdie.org (Global: low place; English: low place)

blog.malwaremustdie.org

unixfreaxjp (28 November 2016). "MMD-0061-2016 - EnergyMech 2.8 Overkill Mod". MalwareMustDie. Archived from the original on 19 January 2017. Retrieved 28 November 2016.
unixfreaxjp.wirehack7, shibumi (29 September 2014). "Linux/XOR.DDoS : Fuzzy reversing a new China ELF". MalwareMustDie. Archived from the original on 2 October 2014. Retrieved 29 September 2014.{{cite web}}: CS1 maint: numeric names: authors list (link)

mcafee.com (Global: low place; English: low place)

"McAfee VirusScan Enterprise for Linux". McAfee. Archived from the original on 18 December 2016. Retrieved 27 December 2012.

nai.com (Global: low place; English: low place)

vil.nai.com

McAfee (December 2004). "Linux/Binom". Archived from the original on 24 January 2005. Retrieved 8 March 2008.
McAfee (June 2005). "Linux/Lupper.worm Description". Archived from the original on 24 November 2005. Retrieved 10 October 2010.

netlux.org (Global: low place; English: low place)

vx.netlux.org

herm1t (August 2006). "Infecting ELF-files using function padding for Linux". Archived from the original on 22 January 2012.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (July 2009). "Can you spare a seg?". Archived from the original on 17 January 2012.
Ferrie, Peter (September 2009). "Heads or tails?". Archived from the original on 17 January 2012.
Ferrie, Peter (August 2009). "Making a hash of things". Archived from the original on 17 January 2012.
herm1t (June 2008). "README". Archived from the original on 6 February 2012.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (February 2008). "Crimea river". Archived from the original on 17 January 2012.
Ferrie, Peter (September 2009). "Flying solo". Archived from the original on 17 January 2012.

nj.gov (Global: 4,276^th place; English: 2,421^st place)

cyber.nj.gov

njccic (28 December 2016). "Mirai Botnet". The New Jersey Cybersecurity and Communications Integration Cell (NJCCIC). Archived from the original on 12 December 2016. Retrieved 28 December 2016.

omgubuntu.co.uk (Global: low place; English: low place)

Joey-Elijah Sneddon (9 December 2014). "Yes, This Trojan Infects Linux. No, It's Not The Tuxpocalypse - OMG! Ubuntu!". OMG! Ubuntu!. Archived from the original on 1 October 2015. Retrieved 10 November 2015.

pandasecurity.com (Global: low place; English: low place)

"Panda Security Antivirus Protection for Linux". Panda Security. Archived from the original on 29 January 2009. Retrieved 13 January 2009.

rfxn.com (Global: low place; English: low place)

https://www.rfxn.com/projects/linux-malware-detect/ Archived 2020-01-15 at the Wayback Machine R-fx Networks project page of LMD

rootkit.nl (Global: low place; English: low place)

"Root Kit Hunter". Archived from the original on 5 March 2013.

roqe.org (Global: low place; English: low place)

Rieck, Konrad and Konrad Kretschmer (August 2001). "Brundle Fly 0.0.1 - A Good-Natured Linux ELF Virus". Archived from the original on 14 May 2008. Retrieved 8 March 2008.

rsa.com (Global: low place; English: low place)

blogs.rsa.com

rsa.com. "Thieves Reaching for Linux—"Hand of Thief" Trojan Targets Linux #INTH3WILD » Speaking of Security - The RSA Blog and Podcast". Blogs.rsa.com. Archived from the original on 15 August 2013. Retrieved 11 August 2013.

securelist.com (Global: low place; English: low place)

w.securelist.com

"Backdoor.Linux.Tsunami.gen". Securelist. Archived from the original on 6 January 2016. Retrieved 9 May 2014.

securelist.com

"The 'Penquin' Turla - Securelist". securelist.com. 8 December 2014. Archived from the original on 20 November 2015. Retrieved 10 November 2015.

securityfocus.com (Global: low place; English: low place)

Granneman, Scott (October 2003). "Linux vs. Windows Viruses". Archived from the original on 5 March 2021. Retrieved 6 March 2008.

softpedia.com (Global: 3,250^th place; English: 2,302^nd place)

news.softpedia.com

Catalin Cimpanu (5 September 2016). "LuaBot Is the First DDoS Malware Coded in Lua Targeting Linux Platforms". Softpedia. Archived from the original on 6 September 2016. Retrieved 5 September 2016.
Catalin Cimpanu (17 September 2016). "LuaBot Author Says His Malware Is "Not Harmful"". Softpedia. Archived from the original on 18 September 2016. Retrieved 17 September 2016.
Catalin Cimpanu (25 August 2016). "PNScan Linux Trojan Resurfaces with New Attacks Targeting Routers in India". Softpedia. Archived from the original on 26 August 2016. Retrieved 25 August 2016.

sophos.com (Global: low place; English: 8,773^rd place)

nakedsecurity.sophos.com

"Botnets, a free tool and 6 years of Linux/Rst-B | Naked Security". Nakedsecurity.sophos.com. 13 February 2008. Archived from the original on 27 January 2019. Retrieved 11 August 2013.

sophos.com

"Free Linux Malware Scanner | Lightweight Agent for Linux Malware Detection and Removal | Sophos". www.sophos.com. Archived from the original on 17 January 2020. Retrieved 30 October 2015.

sourceforge.net (Global: 1,669^th place; English: 1,290^th place)

de Almeida Lopes, Anthony (July 2007). "Project Bukowski". Archived from the original on 14 May 2013. Retrieved 8 March 2008.

symantec.com (Global: 9,107^th place; English: 6,668^th place)

symantec.com

Smith, Stuart (June 2007). "Bad Bunny". Archived from the original on 24 March 2008. Retrieved 20 February 2008.
Florio, Elia (February 2006). "Linux.Backdoor.Kaiten". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
Florio, Elia (December 2007). "Linux.Backdoor.Rexob". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
Ferrie, Peter (April 2007). "Linux.Podloso". Archived from the original on 30 May 2013. Retrieved 8 March 2008.
Ferrie, Peter (April 2007). "The iPod virus". Archived from the original on 2 March 2008. Retrieved 8 March 2008.
Smith, Stuart (May 2007). "Perl.Badbunny". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
Perriot, Frederic (February 2007). "Linux.Millen.Worm". Archived from the original on 16 May 2013. Retrieved 8 March 2008.

service1.symantec.com

Symantec (January 2009). "System requirements for Symantec AntiVirus for Linux 1.0". Archived from the original on 29 April 2007. Retrieved 7 March 2009.

technet.com (Global: 9,482^nd place; English: 6,202^nd place)

blogs.technet.com

Ferrie, Peter (September 2008). "Life, the Universe, and Everything". Archived from the original on 13 August 2012. Retrieved 17 January 2010.

theguardian.com (Global: 12^th place; English: 11^th place)

Samuel Gibbs (6 July 2016). "HummingBad malware infects 10m Android devices". TheGuardian.com. Archived from the original on 19 June 2019. Retrieved 6 July 2016.

thehackernews.com (Global: low place; English: low place)

Mohit Kumar (31 March 2016). "Advanced Malware targeting Internet of the Things and Routers". The Hacker News. Archived from the original on 3 April 2016. Retrieved 3 April 2016.
Mohit Kumar (30 November 2013). "Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability". The Hacker News. Archived from the original on 30 November 2018. Retrieved 4 December 2013.

theregister.co.uk (Global: 1,216^th place; English: 797^th place)

John Leyden (9 September 2014). "Use home networking kit? DDoS bot is BACK... and it has EVOLVED". The Register. Archived from the original on 12 September 2014. Retrieved 9 September 2014.
John Leyden (31 October 2016). "A successor to Mirai? Newly discovered malware aims to create fresh IoT botnet". The Register. Archived from the original on 1 November 2016. Retrieved 31 October 2016.
Leyden, John ( 21 November 2012), Evildoers can now turn all sites on a Linux server into silent hell-pits Archived 2016-11-16 at the Wayback Machine, The Register, retrieved 21 November 2012

threatpost.com (Global: low place; English: low place)

Tara Seals (4 February 2019). "SpeakUp Linux Backdoor Sets Up for Major Attack". Archived from the original on 29 November 2019. Retrieved 4 February 2019.

ubuntu-user.com (Global: low place; English: low place)

Kissling, Kristian (December 2009). "Malicious Screensaver: Malware on Gnome-Look.org". Archived from the original on 13 December 2009. Retrieved 12 December 2009.

virusbtn.com (Global: low place; English: low place)

Kovalev et al (17 July 2014), Mayhem – a hidden threat for *nix web servers Archived 2016-01-06 at the Wayback Machine, Virus Bulletin
Kovalev et al Effusion – a new sophisticated injector for Nginx web servers Archived 2016-01-06 at the Wayback Machine, Virus Bulletin

viruslist.com (Global: low place; English: low place)

Kaspersky Lab (May 2007). "Virus.Linux.Alaeda". Archived from the original on 13 July 2009. Retrieved 8 March 2008.
Kaspersky Lab (December 2001). "Virus.Linux.Nuxbee.1403". Archived from the original on 2 March 2012. Retrieved 8 March 2008.
Kaspersky Lab (August 2003). "Virus.Linux.Rike.1627". Archived from the original on 2 March 2012. Retrieved 8 March 2008.
Kaspersky Lab (January 2002). "Virus.Linux.RST.a". Archived from the original on 7 November 2007. Retrieved 8 March 2008.
Kaspersky Lab (March 2000). "Virus.Linux.Vit.4096". Archived from the original on 7 November 2007. Retrieved 8 March 2008.
Kaspersky Lab (October 2000). "Virus.Linux.Winter.341". Archived from the original on 10 November 2007. Retrieved 8 March 2008.
Kaspersky Lab (January 2001). "Virus.Linux.ZipWorm". Archived from the original on 13 July 2009. Retrieved 8 March 2008.
Kaspersky Lab (May 2001). "Net-Worm.Linux.Adm". Archived from the original on 30 October 2007. Retrieved 8 March 2008.
Kaspersky Lab (May 2001). "Net-Worm.Linux.Cheese". Archived from the original on 28 October 2007. Retrieved 8 March 2008.
Kaspersky Lab (October 2002). "Net-Worm.Linux.Mighty". Archived from the original on 7 November 2007. Retrieved 8 March 2008.

virusradar.com (Global: low place; English: low place)

"Threat Detail - ESET Virusradar". virusradar.com. Archived from the original on 15 April 2016. Retrieved 3 April 2016.
TMZ (January 2019). "Linux.Cephei - ESET Virusradar". Archived from the original on 5 July 2018.
TMZ (January 2015). "Linux.Zariche - ESET Virusradar". Archived from the original on 30 November 2018. Retrieved 23 January 2015.

volatilesystems.com (Global: low place; English: low place)

volatilesystems.com Archived 2011-02-17 at the Library of Congress Web Archives

vxheavens.com (Global: low place; English: low place)

herm1t (February 2008). "Caveat virus". Archived from the original on 23 December 2018. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
herm1t (October 2007). "Reverse of a coin: A short note on segment alignment". Archived from the original on 3 March 2012. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
herm1t (October 2007). "Hashin' the elves". Archived from the original on 10 October 2014. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
herm1t (November 2007). "INT 0x80? No, thank you!". Archived from the original on 23 December 2018. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
herm1t (December 2009). "From position-independent to self-relocatable viral code". Archived from the original on 24 May 2019. Retrieved 7 May 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)

web.archive.org (Global: 1^st place; English: 1^st place)

Granneman, Scott (October 2003). "Linux vs. Windows Viruses". Archived from the original on 5 March 2021. Retrieved 6 March 2008.
Yeargin, Ray (July 2005). "The short life and hard times of a linux virus". Archived from the original on 1 May 2008. Retrieved 6 December 2015.
"Virus Department". Archived from the original on 25 December 2015. Retrieved 24 December 2015.
Patrizio, Andy (April 2006). "Linux Malware On The Rise". Archived from the original on 5 February 2012. Retrieved 8 March 2008.
ClamAV (2010). "Clam AntiVirus 0.96 User Manual" (PDF). Archived (PDF) from the original on 19 February 2011. Retrieved 22 February 2011.
Smith, Stuart (June 2007). "Bad Bunny". Archived from the original on 24 March 2008. Retrieved 20 February 2008.
Kissling, Kristian (December 2009). "Malicious Screensaver: Malware on Gnome-Look.org". Archived from the original on 13 December 2009. Retrieved 12 December 2009.
"Discontinuation of Antivirus solutions for Linux systems on June 30th 2016". Archived from the original on 14 December 2017. Retrieved 14 October 2014.
"ClamAV". Archived from the original on 22 July 2013. Retrieved 22 February 2011.
Comodo Group (2015). "Comodo Antivirus for Linux". Archived from the original on 11 December 2015. Retrieved 17 October 2012.
"Dr.Web anti-virus for Linux". Dashke. Archived from the original on 27 February 2019. Retrieved 25 May 2010.
FRISK Software International (2011). "F-PROT Antivirus for Linux x86 / BSD x86". Archived from the original on 4 December 2011. Retrieved 13 December 2011.
"Kaspersky Linux Security - Gateway, mail and file server, workstation protection for Linux/FreeBSD". Kaspersky Lab. Archived from the original on 24 June 2011. Retrieved 11 February 2009.
"McAfee VirusScan Enterprise for Linux". McAfee. Archived from the original on 18 December 2016. Retrieved 27 December 2012.
"Panda Security Antivirus Protection for Linux". Panda Security. Archived from the original on 29 January 2009. Retrieved 13 January 2009.
Symantec (January 2009). "System requirements for Symantec AntiVirus for Linux 1.0". Archived from the original on 29 April 2007. Retrieved 7 March 2009.
"chkrootkit -- locally checks for signs of a rootkit". www.chkrootkit.org. Archived from the original on 13 January 2020. Retrieved 7 September 2019.
"ClamavNet". www.clamav.net. Archived from the original on 22 July 2013. Retrieved 3 December 2008.
"COMODO Antivirus for Linux (CAVL) v1.1.268025.1 is released!". comodo.com. 28 February 2013. Archived from the original on 18 November 2018. Retrieved 12 June 2014.
"ESET File Security - Antivirus Protection for Linux, BSD, and Solaris". Eset. Archived from the original on 18 November 2018. Retrieved 26 October 2008.
"ESET Mail Security - Linux, BSD, and Solaris mail server protection". Eset. Archived from the original on 12 May 2008. Retrieved 26 October 2008.
"ESET NOD32 Antivirus for Linux Gateway Devices". Eset. Archived from the original on 10 May 2008. Retrieved 26 October 2008.
"ESET NOD32 Antivirus 4 for Linux Desktop". Eset. Archived from the original on 21 July 2015. Retrieved 12 June 2014.
https://www.rfxn.com/projects/linux-malware-detect/ Archived 2020-01-15 at the Wayback Machine R-fx Networks project page of LMD
"Lynis - Security auditing and hardening tool for Linux/Unix". cisofy.com. Archived from the original on 4 February 2020. Retrieved 9 January 2017.
"Lynis: Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional. - CISOf." 7 September 2019. Archived from the original on 5 February 2020. Retrieved 9 January 2017 – via GitHub.
"Root Kit Hunter". Archived from the original on 5 March 2013.
"Botnets, a free tool and 6 years of Linux/Rst-B | Naked Security". Nakedsecurity.sophos.com. 13 February 2008. Archived from the original on 27 January 2019. Retrieved 11 August 2013.
"Free Linux Malware Scanner | Lightweight Agent for Linux Malware Detection and Removal | Sophos". www.sophos.com. Archived from the original on 17 January 2020. Retrieved 30 October 2015.
"Forcepoint". Forcepoint. Archived from the original on 23 January 2020. Retrieved 7 September 2019.
"Google Code Archive - Long-term storage for Google Code Project Hosting". code.google.com. Archived from the original on 27 August 2019. Retrieved 7 September 2019.
Kovalev et al (17 July 2014), Mayhem – a hidden threat for *nix web servers Archived 2016-01-06 at the Wayback Machine, Virus Bulletin
Michal Malík; Marc-Etienne M.Léveillé (30 March 2016). "Meet Remaiten - a Linux bot on steroids targeting routers and potentially other IoT devices". WeLiveSecurity. Archived from the original on 5 November 2018. Retrieved 4 November 2018.
"Threat Detail - ESET Virusradar". virusradar.com. Archived from the original on 15 April 2016. Retrieved 3 April 2016.
Mohit Kumar (31 March 2016). "Advanced Malware targeting Internet of the Things and Routers". The Hacker News. Archived from the original on 3 April 2016. Retrieved 3 April 2016.
njccic (28 December 2016). "Mirai Botnet". The New Jersey Cybersecurity and Communications Integration Cell (NJCCIC). Archived from the original on 12 December 2016. Retrieved 28 December 2016.
Krebs, Brian (21 September 2016). "KrebsOnSecurity Hit With Record DDoS". Brian Krebs. Archived from the original on 15 November 2016. Retrieved 17 November 2016.
Hackett, Robert (3 October 2016). "Why a Hacker Dumped Code Behind Colossal Website-Trampling Botnet". Fortune.com. Archived from the original on 22 October 2016. Retrieved 19 October 2016.
Newman, Lily Hay. "What We Know About Friday's Massive East Coast Internet Outage". WIRED. Archived from the original on 22 October 2016. Retrieved 21 October 2016.
Liam Tung (25 September 2014). "First attacks using shellshock Bash bug discovered". ZDNet. Archived from the original on 21 December 2014. Retrieved 25 September 2014.
Catalin Cimpanu (5 September 2016). "LuaBot Is the First DDoS Malware Coded in Lua Targeting Linux Platforms". Softpedia. Archived from the original on 6 September 2016. Retrieved 5 September 2016.
Catalin Cimpanu (17 September 2016). "LuaBot Author Says His Malware Is "Not Harmful"". Softpedia. Archived from the original on 18 September 2016. Retrieved 17 September 2016.
Infodox (12 June 2012). "Hydra IRC bot, the 25 minute overview of the kit". Insecurety Research. Archived from the original on 7 February 2014. Retrieved 12 June 2012.
Dan Goodin (21 March 2013). "Guerilla researcher created epic botnet to scan billions of IP addresses". Ars Technica. Archived from the original on 20 March 2013. Retrieved 21 March 2013.
John Leyden (9 September 2014). "Use home networking kit? DDoS bot is BACK... and it has EVOLVED". The Register. Archived from the original on 12 September 2014. Retrieved 9 September 2014.
John Leyden (31 October 2016). "A successor to Mirai? Newly discovered malware aims to create fresh IoT botnet". The Register. Archived from the original on 1 November 2016. Retrieved 31 October 2016.
unixfreaxjp (28 November 2016). "MMD-0061-2016 - EnergyMech 2.8 Overkill Mod". MalwareMustDie. Archived from the original on 19 January 2017. Retrieved 28 November 2016.
"Linux.Encoder.1". drweb.com. Archived from the original on 17 November 2015. Retrieved 10 November 2015.
Lucian Constantin (10 November 2015). "First Linux ransomware program cracked, for now". Computerworld. Archived from the original on 12 November 2015. Retrieved 10 November 2015.
"Lilocked". Archived from the original on 7 September 2019. Retrieved 7 September 2019.
Goud, Naveen (6 September 2019). "LiLocked Ransomware hits Linux Servers". Archived from the original on 21 February 2021. Retrieved 7 September 2019.
Leyden, John ( 21 November 2012), Evildoers can now turn all sites on a Linux server into silent hell-pits Archived 2016-11-16 at the Wayback Machine, The Register, retrieved 21 November 2012
Kovalev et al Effusion – a new sophisticated injector for Nginx web servers Archived 2016-01-06 at the Wayback Machine, Virus Bulletin
rsa.com. "Thieves Reaching for Linux—"Hand of Thief" Trojan Targets Linux #INTH3WILD » Speaking of Security - The RSA Blog and Podcast". Blogs.rsa.com. Archived from the original on 15 August 2013. Retrieved 11 August 2013.
Vaughan, Steven J. "Linux desktop Trojan 'Hand of Thief' steals in". ZDNet. Archived from the original on 16 November 2014. Retrieved 11 August 2013.
Florio, Elia (February 2006). "Linux.Backdoor.Kaiten". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
Florio, Elia (December 2007). "Linux.Backdoor.Rexob". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
Vervloesem, Koen (December 2009). "Linux malware: an incident and some solutions". Archived from the original on 18 November 2016. Retrieved 16 September 2010.
"Backdoor.Linux.Tsunami.gen". Securelist. Archived from the original on 6 January 2016. Retrieved 9 May 2014.
"The 'Penquin' Turla - Securelist". securelist.com. 8 December 2014. Archived from the original on 20 November 2015. Retrieved 10 November 2015.
Joey-Elijah Sneddon (9 December 2014). "Yes, This Trojan Infects Linux. No, It's Not The Tuxpocalypse - OMG! Ubuntu!". OMG! Ubuntu!. Archived from the original on 1 October 2015. Retrieved 10 November 2015.
unixfreaxjp.wirehack7, shibumi (29 September 2014). "Linux/XOR.DDoS : Fuzzy reversing a new China ELF". MalwareMustDie. Archived from the original on 2 October 2014. Retrieved 29 September 2014.{{cite web}}: CS1 maint: numeric names: authors list (link)
Akamai Technologies (29 September 2015). "OR DDoS Botnet Launching 20 Attacks a Day From Compromised Linux Machines, Says Akamai". Archived from the original on 18 March 2016. Retrieved 18 March 2016.
Samuel Gibbs (6 July 2016). "HummingBad malware infects 10m Android devices". TheGuardian.com. Archived from the original on 19 June 2019. Retrieved 6 July 2016.
David Bisson (17 October 2016). "NyaDrop exploiting Internet of Things insecurity to infect Linux devices with malware". Graham Cluley. Archived from the original on 5 November 2018. Retrieved 4 November 2018.
Catalin Cimpanu (25 August 2016). "PNScan Linux Trojan Resurfaces with New Attacks Targeting Routers in India". Softpedia. Archived from the original on 26 August 2016. Retrieved 25 August 2016.
Tara Seals (4 February 2019). "SpeakUp Linux Backdoor Sets Up for Major Attack". Archived from the original on 29 November 2019. Retrieved 4 February 2019.
Ferrie, Peter (September 2008). "Life, the Universe, and Everything". Archived from the original on 13 August 2012. Retrieved 17 January 2010.
herm1t (August 2006). "Infecting ELF-files using function padding for Linux". Archived from the original on 22 January 2012.{{cite web}}: CS1 maint: numeric names: authors list (link)
Kaspersky Lab (May 2007). "Virus.Linux.Alaeda". Archived from the original on 13 July 2009. Retrieved 8 March 2008.
McAfee (December 2004). "Linux/Binom". Archived from the original on 24 January 2005. Retrieved 8 March 2008.
Rieck, Konrad and Konrad Kretschmer (August 2001). "Brundle Fly 0.0.1 - A Good-Natured Linux ELF Virus". Archived from the original on 14 May 2008. Retrieved 8 March 2008.
de Almeida Lopes, Anthony (July 2007). "Project Bukowski". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
herm1t (February 2008). "Caveat virus". Archived from the original on 23 December 2018. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (July 2009). "Can you spare a seg?". Archived from the original on 17 January 2012.
TMZ (January 2019). "Linux.Cephei - ESET Virusradar". Archived from the original on 5 July 2018.
herm1t (October 2007). "Reverse of a coin: A short note on segment alignment". Archived from the original on 3 March 2012. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (September 2009). "Heads or tails?". Archived from the original on 17 January 2012.
herm1t (October 2007). "Hashin' the elves". Archived from the original on 10 October 2014. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (August 2009). "Making a hash of things". Archived from the original on 17 January 2012.
herm1t (June 2008). "README". Archived from the original on 6 February 2012.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (February 2008). "Crimea river". Archived from the original on 17 January 2012.
Kaspersky Lab (December 2001). "Virus.Linux.Nuxbee.1403". Archived from the original on 2 March 2012. Retrieved 8 March 2008.
herm1t (November 2007). "INT 0x80? No, thank you!". Archived from the original on 23 December 2018. Retrieved 17 January 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
Ferrie, Peter (September 2009). "Flying solo". Archived from the original on 17 January 2012.
Ferrie, Peter (April 2007). "Linux.Podloso". Archived from the original on 30 May 2013. Retrieved 8 March 2008.
Ferrie, Peter (April 2007). "The iPod virus". Archived from the original on 2 March 2008. Retrieved 8 March 2008.
herm1t (December 2009). "From position-independent to self-relocatable viral code". Archived from the original on 24 May 2019. Retrieved 7 May 2010.{{cite web}}: CS1 maint: numeric names: authors list (link)
Kaspersky Lab (August 2003). "Virus.Linux.Rike.1627". Archived from the original on 2 March 2012. Retrieved 8 March 2008.
Kaspersky Lab (January 2002). "Virus.Linux.RST.a". Archived from the original on 7 November 2007. Retrieved 8 March 2008.
"The ways of viruses in Linux HOW SAFE?" (PDF). Archived from the original (PDF) on 17 May 2014. Retrieved 21 August 2009.
Kaspersky Lab (March 2000). "Virus.Linux.Vit.4096". Archived from the original on 7 November 2007. Retrieved 8 March 2008.
Kaspersky Lab (October 2000). "Virus.Linux.Winter.341". Archived from the original on 10 November 2007. Retrieved 8 March 2008.
Rautiainen, Sami; et al. (March 2001). "F-Secure Virus Descriptions: Lindose". Archived from the original on 21 June 2008. Retrieved 8 March 2008.
"The Wit Virus: A virus built on the ViT ELF virus" (PDF). Archived (PDF) from the original on 3 March 2016. Retrieved 31 December 2008.
TMZ (January 2015). "Linux.Zariche - ESET Virusradar". Archived from the original on 30 November 2018. Retrieved 23 January 2015.
Kaspersky Lab (January 2001). "Virus.Linux.ZipWorm". Archived from the original on 13 July 2009. Retrieved 8 March 2008.
Kaspersky Lab (May 2001). "Net-Worm.Linux.Adm". Archived from the original on 30 October 2007. Retrieved 8 March 2008.
Rautiainen, Sami (April 2001). "F-Secure Virus Descriptions: Adore". Archived from the original on 12 May 2013. Retrieved 8 March 2008.
Smith, Stuart (May 2007). "Perl.Badbunny". Archived from the original on 14 May 2013. Retrieved 8 March 2008.
Kaspersky Lab (May 2001). "Net-Worm.Linux.Cheese". Archived from the original on 28 October 2007. Retrieved 8 March 2008.
Rautiainen, Sami (April 2001). "F-Secure Virus Descriptions: Kork". Archived from the original on 12 May 2013. Retrieved 8 March 2008.
Mohit Kumar (30 November 2013). "Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability". The Hacker News. Archived from the original on 30 November 2018. Retrieved 4 December 2013.
Joe Casad (3 December 2013). "New Worm Attacks Linux Devices". Linux Magazine. Archived from the original on 6 December 2013. Retrieved 4 December 2013.
McAfee (June 2005). "Linux/Lupper.worm Description". Archived from the original on 24 November 2005. Retrieved 10 October 2010.
Kaspersky Lab (October 2002). "Net-Worm.Linux.Mighty". Archived from the original on 7 November 2007. Retrieved 8 March 2008.
Perriot, Frederic (February 2007). "Linux.Millen.Worm". Archived from the original on 16 May 2013. Retrieved 8 March 2008.
Rautiainen, Sami; et al. (September 2002). "F-Secure Virus Descriptions: Slapper". Archived from the original on 27 June 2012. Retrieved 8 March 2008.

welivesecurity.com (Global: low place; English: low place)

Michal Malík; Marc-Etienne M.Léveillé (30 March 2016). "Meet Remaiten - a Linux bot on steroids targeting routers and potentially other IoT devices". WeLiveSecurity. Archived from the original on 5 November 2018. Retrieved 4 November 2018.

wired.com (Global: 193^rd place; English: 152^nd place)

Newman, Lily Hay. "What We Know About Friday's Massive East Coast Internet Outage". WIRED. Archived from the original on 22 October 2016. Retrieved 21 October 2016.

worldcat.org (Global: 5^th place; English: 5^th place)

search.worldcat.org

Duncan, Rory; Schreuders, Z. Cliffe (1 March 2019). "Security implications of running windows software on a Linux system using Wine: a malware analysis study". Journal of Computer Virology and Hacking Techniques. 15 (1): 39–60. doi:10.1007/s11416-018-0319-9. ISSN 2263-8733.

zdnet.com (Global: 786^th place; English: 558^th place)

Liam Tung (25 September 2014). "First attacks using shellshock Bash bug discovered". ZDNet. Archived from the original on 21 December 2014. Retrieved 25 September 2014.
Vaughan, Steven J. "Linux desktop Trojan 'Hand of Thief' steals in". ZDNet. Archived from the original on 16 November 2014. Retrieved 11 August 2013.

Linux malware (English Wikipedia)

akamai.com (Global: low place; English: low place)

altsci.com (Global: low place; English: low place)

archive.today (Global: 14th place; English: 14th place)

arstechnica.com (Global: 388th place; English: 265th place)

avira.com (Global: low place; English: low place)

bleepingcomputer.com (Global: 6,171st place; English: 4,055th place)

chkrootkit.org (Global: low place; English: low place)

cisofy.com (Global: low place; English: low place)

clamav.net (Global: low place; English: low place)

code.google.com (Global: 4,942nd place; English: 4,061st place)

comodo.com (Global: low place; English: low place)

comodo.com

forums.comodo.com

computerworld.com (Global: 2,429th place; English: 1,561st place)

cybersecurity-insiders.com (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

drweb.com (Global: low place; English: low place)

products.drweb.com

vms.drweb.com

ebscohost.com (Global: 1,786th place; English: 1,096th place)

connection.ebscohost.com

eof-project.net (Global: low place; English: low place)

vx.eof-project.net

eset.com (Global: low place; English: low place)

eweek.com (Global: 5,390th place; English: 3,454th place)

f-prot.com (Global: low place; English: low place)

f-secure.com (Global: low place; English: low place)

forcepoint.com (Global: low place; English: low place)

fortune.com (Global: 433rd place; English: 284th place)

github.com (Global: 383rd place; English: 320th place)

grahamcluley.com (Global: low place; English: low place)

hellug.gr (Global: low place; English: low place)

members.hellug.gr

ibm.com (Global: 1,131st place; English: 850th place)

newsroom.ibm.com

insecurety.net (Global: low place; English: low place)

internetnews.com (Global: low place; English: 8,800th place)

kaspersky.com (Global: low place; English: low place)

krebsonsecurity.com (Global: low place; English: low place)

la-samhna.de (Global: low place; English: low place)

librenix.com (Global: low place; English: low place)

linux-magazine.com (Global: low place; English: low place)

linuxmafia.com (Global: low place; English: low place)

loc.gov (Global: 70th place; English: 63rd place)

webarchive.loc.gov

lwn.net (Global: 4,423rd place; English: 2,925th place)

malwaremustdie.org (Global: low place; English: low place)

blog.malwaremustdie.org

mcafee.com (Global: low place; English: low place)

nai.com (Global: low place; English: low place)

vil.nai.com

netlux.org (Global: low place; English: low place)

vx.netlux.org

nj.gov (Global: 4,276th place; English: 2,421st place)

cyber.nj.gov

omgubuntu.co.uk (Global: low place; English: low place)

pandasecurity.com (Global: low place; English: low place)

rfxn.com (Global: low place; English: low place)

rootkit.nl (Global: low place; English: low place)

roqe.org (Global: low place; English: low place)

rsa.com (Global: low place; English: low place)

blogs.rsa.com

securelist.com (Global: low place; English: low place)

w.securelist.com

securelist.com

securityfocus.com (Global: low place; English: low place)

softpedia.com (Global: 3,250th place; English: 2,302nd place)

news.softpedia.com

sophos.com (Global: low place; English: 8,773rd place)

nakedsecurity.sophos.com

sophos.com

sourceforge.net (Global: 1,669th place; English: 1,290th place)

symantec.com (Global: 9,107th place; English: 6,668th place)

symantec.com

service1.symantec.com

technet.com (Global: 9,482nd place; English: 6,202nd place)

blogs.technet.com

theguardian.com (Global: 12th place; English: 11th place)

thehackernews.com (Global: low place; English: low place)

archive.today (Global: 14^th place; English: 14^th place)

arstechnica.com (Global: 388^th place; English: 265^th place)

bleepingcomputer.com (Global: 6,171^st place; English: 4,055^th place)

code.google.com (Global: 4,942^nd place; English: 4,061^st place)

computerworld.com (Global: 2,429^th place; English: 1,561^st place)

doi.org (Global: 2^nd place; English: 2^nd place)

ebscohost.com (Global: 1,786^th place; English: 1,096^th place)

eweek.com (Global: 5,390^th place; English: 3,454^th place)

fortune.com (Global: 433^rd place; English: 284^th place)

github.com (Global: 383^rd place; English: 320^th place)

ibm.com (Global: 1,131^st place; English: 850^th place)

internetnews.com (Global: low place; English: 8,800^th place)

loc.gov (Global: 70^th place; English: 63^rd place)

lwn.net (Global: 4,423^rd place; English: 2,925^th place)

nj.gov (Global: 4,276^th place; English: 2,421^st place)

softpedia.com (Global: 3,250^th place; English: 2,302^nd place)

sophos.com (Global: low place; English: 8,773^rd place)

sourceforge.net (Global: 1,669^th place; English: 1,290^th place)

symantec.com (Global: 9,107^th place; English: 6,668^th place)

technet.com (Global: 9,482^nd place; English: 6,202^nd place)

theguardian.com (Global: 12^th place; English: 11^th place)

theregister.co.uk (Global: 1,216^th place; English: 797^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wired.com (Global: 193^rd place; English: 152^nd place)

worldcat.org (Global: 5^th place; English: 5^th place)

zdnet.com (Global: 786^th place; English: 558^th place)