CNN

SambaCry Flaws A seven year old critical remote code execution vulnerability ( CVE 2017-7494 ) in Samba networking software that allows a remote hacker to take full control of a vulnerable Linux and Unix machines has recently been discovered. R esearchers predicted that the SambaCry Flaw based attacks also have potential to spread just like  WannaCry ransomware  widely.   Kaspersky Lab  have captured a malware campaign that is exploiting SambaCry vulnerability to infect Linux computers with cryptocurrency mining software. After compromising the vulnerable machines using SambaCry vulnerability flaw, attackers execute two payloads on the targeted systems, as: INAebsGB.so — A reverse-shell that provides remote access to the attackers. cblRWuoCc.so — A backdoor that includes cryptocurrency mining utilities such as CPUminer. "Through the reverse-shell left in the system, the attackers can change the configuration of a miner already running or infect the vi...