SNEAKY SSH-SNAKE MALWARE STEALS SSH KEYS - PUTTING YOUR WHOLE NETWORK AT RISK

Summary from the TLDR InfoSec newsletter

Approximately 100 organizations have had their SSH credentials stolen using a recently released open source pentesting tool with worm-like capabilities. The tool is completely self-replicating and self-propagating — and completely fileless. In many ways, SSH-Snake is actually a worm: it replicates itself and spreads itself from one system to another as far as it can.