CHINESE HACKERS TARGET LINUX WITH NEW WOLFSBANE MALWARE

Summary from the TLDR InfoSec newsletter

ESET researchers have discovered two new Linux magister families that are connected to Chinese APTs. WolfsBane is dropped via a dropper named Cron, which disguises the launcher as a KDE desktop component which then disables SELinux and eventually loads a rootkit that hooks several syscalls to evade detection. FireWood is another rootkit that maintains persistence by creating an autostart file.