PASSWORD STEALING LINUX MALWARE EVADES NOTICE FOR 3 YEARS

Summary from the TLDR InfoSec newsletter

From 2020 until 2022, a random sampling of users downloading the Free Download Manager software received a Trojan horse version of the app. The malicious software has a collector backdoor that collects secrets from systems and then utilizes another backdoor to download an uploaded script from a C2 and periodically upload the stolen secrets. IOCs are included in the article.