New Malware Campaign Targets Linux Servers in Cloud Environments

Security researchers have uncovered a malware campaign specifically targeting Linux-based servers hosted in cloud environments. The attackers are exploiting weak SSH configurations and exposed credentials to gain initial access, after which they deploy malicious scripts to establish persistence and execute cryptomining operations.

Unlike traditional malware, this campaign is designed to remain hidden by mimicking legitimate system processes and limiting resource usage to avoid detection. Researchers noted that compromised servers are also being used as part of larger botnets to carry out additional attacks. This development highlights a shift in attacker focus toward cloud infrastructure, which has become a critical backbone for modern businesses. Experts recommend strengthening SSH security, disabling password-based logins where possible, and implementing continuous monitoring to detect unusual server activity.

17-03-2026