Incident Response, Malware, TDR

Linux worm discovered, capable of infecting internet-enabled home devices

Researchers have discovered a worm, called “Darlloz,” which is capable of infecting traditional computers as well as other internet-enabled consumer devices running the Linux operating system.

Darlloz leverages a PHP information disclosure vulnerability that was patched in May 2012 and has, so far, only targeted Intel x86 systems, according to Kaoru Hayashi, a Symantec researcher who blogged about the threat last Wednesday.

In addition to machines, the worm, which deletes files, was designed to target the “internet of things,” Hayashi wrote, including home routers, set-top boxes and security cameras.  

While researchers have not detected any attacks against non-PC devices, the worm's capabilities are concerning as many users are unaware that they operate vulnerable Linux-based devices in their homes or offices, Hayashi said.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.