Linux worm targets 'internet of things'

By on
Linux worm targets 'internet of things'
Credit

Exploits PHP vulnerability.

Researchers have discovered a worm capable of infecting internet-enabled consumer devices running the Linux operating system.

The Darlloz worm leverages a PHP information disclosure vulnerability that was patched in May 2012 and has, so far, only targeted Intel x86 systems, according to Kaoru Hayashi, a Symantec researcher who blogged about the threat last Wednesday.

In addition to machines, the worm, which deletes files, was designed to target the “internet of things,” Hayashi wrote, including home routers, set-top boxes and security cameras.  

While researchers have not detected any attacks against non-PC devices, the worm's capabilities are concerning as many users are unaware that they operate vulnerable Linux-based devices in their homes or offices, Hayashi said.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Log In

Username:
Password:
|  Forgot your password?