Researchers have discovered a worm, called “Darlloz,” which is capable of infecting traditional computers as well as other internet-enabled consumer devices running the Linux operating system.
Darlloz leverages a PHP information disclosure vulnerability that was patched in May 2012 and has, so far, only targeted Intel x86 systems, according to Kaoru Hayashi, a Symantec researcher who blogged about the threat last Wednesday.
In addition to machines, the worm, which deletes files, was designed to target the “internet of things,” Hayashi wrote, including home routers, set-top boxes and security cameras.
While researchers have not detected any attacks against non-PC devices, the worm's capabilities are concerning as many users are unaware that they operate vulnerable Linux-based devices in their homes or offices, Hayashi said.
