Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner
Researchers studying cybersecurity have uncovered a new campaign that delivers a bitcoin miner named Linuxsys by taking use of a known security vulnerability in the Apache HTTP Server.
The vulnerability in question is a high-severity path traversal vulnerability in Apache HTTP Server version 2.4.49 called CVE-2021-41773 (CVSS score: 7.5), which has the potential to cause remote code execution.
Jacob Baines of VulnCheck told The Hacker News that the attacker uses compromised genuine websites to spread malware, allowing for covert distribution and detection avoidance.
The infection sequence, which was discovered earlier this month and came from the Indonesian IP address 103.193.177[.]152, is intended to use curl or wget to release a next-stage payload from "repositorylinux[.]org".
...