Linux worm targets 'internet of things'

Researchers have discovered a worm capable of infecting internet-enabled consumer devices running the Linux operating system.

Credit

The Darlloz worm leverages a PHP information disclosure vulnerability that was patched in May 2012 and has, so far, only targeted Intel x86 systems, according to Kaoru Hayashi, a Symantec researcher who blogged about the threat last Wednesday.

In addition to machines, the worm, which deletes files, was designed to target the “internet of things,” Hayashi wrote, including home routers, set-top boxes and security cameras.  

While researchers have not detected any attacks against non-PC devices, the worm's capabilities are concerning as many users are unaware that they operate vulnerable Linux-based devices in their homes or offices, Hayashi said.

This article originally appeared at scmagazineus.com